harukin/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

bad redirects

Browse Source
This commit is contained in:
friendica 2014-09-11 23:01:58 -07:00
parent cd7d845568
commit 20be358ec2
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
include/security.php
View File

@ -46,6 +46,12 @@ function authenticate_success($user_record, $login_initial = false, $interactive
if(($a->module !== 'home') && x($_SESSION,'login_return_url') && strlen($_SESSION['login_return_url'])) { if(($a->module !== 'home') && x($_SESSION,'login_return_url') && strlen($_SESSION['login_return_url'])) {
$return_url = $_SESSION['login_return_url']; $return_url = $_SESSION['login_return_url'];
// don't let members get redirected to a raw ajax page update - this can happen
// if DHCP changes the IP address at an unfortunate time and paranoia is turned on
if(strstr($return_url,'update_'))
$return_url = '';
unset($_SESSION['login_return_url']); unset($_SESSION['login_return_url']);
goaway($a->get_baseurl() . '/' . $return_url); goaway($a->get_baseurl() . '/' . $return_url);
} }