harukin/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

don't include the q and PHPSESSID request variables in a redirected rpost

Browse Source
This commit is contained in:
zotlabs 2018-03-27 16:27:28 -07:00
parent 35b6c2baad
commit 5ea11d1222
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Zotlabs/Module/Rpost.php
View File

@ -45,7 +45,9 @@ class Rpost extends \Zotlabs\Web\Controller {
$url = get_rpost_path(\App::get_observer());
// make sure we're not looping to our own hub
if(($url) && (! stristr($url, \App::get_hostname()))) {
foreach($_REQUEST as $key => $arg) {
foreach($_GET as $key => $arg) {
if($key === 'q')
continue;
$url .= '&' . $key . '=' . $arg;
}
goaway($url);