public/tt-rss
1
0
Fork 0
mirror of https://git.tt-rss.org/git/tt-rss.git synced 2025-12-13 06:55:56 +00:00
Code Issues Releases Wiki Activity

login: switch to absolute redirect urls

Browse Source
This commit is contained in:
Andrew Dolgov
2019-03-04 20:38:39 +03:00
parent e8edad377a
commit 5b3a73e574
3 changed files with 11 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
classes/handler/public.php
View File

@@ -623,7 +623,7 @@ class Handler_Public extends Handler {
} else {
$return = urlencode($_SERVER["REQUEST_URI"])
$return = urlencode(make_self_url());
?>
@@ -712,7 +712,9 @@ class Handler_Public extends Handler {
user_error("Failed login attempt for $login from {$_SERVER['REMOTE_ADDR']}", E_USER_WARNING);
}
if (clean($_REQUEST['return'])) {
$return = clean($_REQUEST['return']);
if ($_REQUEST['return'] && mb_strpos($return, SELF_URL_PATH) === 0) {
header("Location: " . clean($_REQUEST['return']));
} else {
header("Location: " . get_self_url_prefix());