gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-05-13 13:11:31 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

fix check for referer starting with /op

Browse Source 
didn't work, because referer was urlencode before the check, which
turned the '/' into '%xx'
This commit is contained in:
Uwe Steinmann 2014-03-21 08:07:18 +01:00
parent 646128cbd8
commit 21d5c868a3
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
inc/inc.Authentication.php
View File

@ -12,9 +12,11 @@
* @version Release: @package_version@ * @version Release: @package_version@
*/ */
$refer=urlencode($_SERVER["REQUEST_URI"]); $refer = $_SERVER["REQUEST_URI"];
if (!strncmp("/op", $refer, 3)) { if (!strncmp("/op", $refer, 3)) {
$refer=""; $refer="";
} else {
$refer = urlencode($refer);
} }
if (!isset($_COOKIE["mydms_session"])) { if (!isset($_COOKIE["mydms_session"])) {
header("Location: " . $settings->_httpRoot . "out/out.Login.php?referuri=".$refer); header("Location: " . $settings->_httpRoot . "out/out.Login.php?referuri=".$refer);