gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-02-06 15:14:58 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

use host name in redirect to prevent redirecting to arbitrary pages

Browse Source
This commit is contained in:
Uwe Steinmann 2019-07-30 06:36:34 +02:00
parent 3d5812c86d
commit 90baea95f0
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
op/op.SetLanguage.php
View File

@ -30,5 +30,5 @@ include("../inc/inc.Authentication.php");
$session->setLanguage($_GET['lang']);
header("Location: ".$_GET['referer']);
header("Location: http".((isset($_SERVER['HTTPS']) && (strcmp($_SERVER['HTTPS'],'off')!=0)) ? "s" : "")."://".$_SERVER['HTTP_HOST'].$_GET['referer']);
?>