Challenge 1 / 1

Why did we add this extra check for the referer in the success() action?

    public function success()
        $referer = $request->headers->get('referer');
        $lsStoreUrl = 'https://squeeze-the-day.lemonsqueezy.com';
        if (!str_starts_with($referer, $lsStoreUrl)) {
            return $this->redirectToRoute('app_homepage');
        }
        // ...
    }

So that only authenticated customers in LemonSqueezy can access it.

We just want to verify that LemonSqueezy sent us this request.

So that we could show a flash message to the user.

So that users can't access this page directly.

Rewatch the video