mirror of
https://github.com/phpbb/phpbb.git
synced 2025-07-30 21:40:43 +02:00
*** empty log message ***
git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4933 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
@@ -188,10 +188,11 @@ function make_jumpbox($action, $match_forum_id = 0)
|
||||
$boxstring .= '<select name="' . POST_FORUM_URL . '" onchange="if(this.options[this.selectedIndex].value != -1){ forms[\'jumpbox\'].submit() }"></select>';
|
||||
}
|
||||
|
||||
if ( !empty($SID) )
|
||||
{
|
||||
// Let the jumpbox work again in sites having additional session id checks.
|
||||
// if ( !empty($SID) )
|
||||
// {
|
||||
$boxstring .= '<input type="hidden" name="sid" value="' . $userdata['session_id'] . '" />';
|
||||
}
|
||||
// }
|
||||
|
||||
$template->set_filenames(array(
|
||||
'jumpbox' => 'jumpbox.tpl')
|
||||
@@ -744,6 +745,11 @@ function redirect($url)
|
||||
$db->sql_close();
|
||||
}
|
||||
|
||||
if (strstr(urldecode($url), "\n") || strstr(urldecode($url), "\r"))
|
||||
{
|
||||
message_die(GENERAL_ERROR, 'Tried to redirect to potentially insecure url.');
|
||||
}
|
||||
|
||||
$server_protocol = ($board_config['cookie_secure']) ? 'https://' : 'http://';
|
||||
$server_name = preg_replace('#^\/?(.*?)\/?$#', '\1', trim($board_config['server_name']));
|
||||
$server_port = ($board_config['server_port'] <> 80) ? ':' . trim($board_config['server_port']) : '';
|
||||
|
Reference in New Issue
Block a user