Is using a header('location: ') enough to password protect a page?
<p>Basically, I am checking to see if the user is logged in and if not I will use header('location: login.php') to redirect to the login page.  </p>

<p>I am confused if the browser is actually redirecting or the server? If it is the browser then would it be possible for the user to prevent the browser from redirecting and view the contents of the page?</p>
