title: Is Meta Refresh Redirect "Secure"
body: <p>I have a line of code that redirects the user from <code>index.php</code> to <code>enable-js.php</code> if they block Javascript:</p>
  
  <pre><code>&lt;noscript&gt;&lt;meta http-equiv="refresh" content="0;url=enable-js.php"&gt;&lt;/noscript&gt;
  </code></pre>
  
  <p>Since this is a client side redirect, is it still possible for a user to still access <code>index.php</code> to do something like fill out a form while they have javascript disabled, or should I find a way to implement PHP <code>headers</code> instead?</p>