MDL-41223 do not store any form of login URL in $SESSION->wantsurl

Credit goes to Michael Milette, thanks.
This commit is contained in:
Petr Škoda 2013-09-12 22:30:52 +02:00
parent 7f3836d15a
commit 4cf6e8b71d

View File

@ -275,7 +275,8 @@ if (empty($SESSION->wantsurl)) {
$_SERVER["HTTP_REFERER"] != $CFG->wwwroot &&
$_SERVER["HTTP_REFERER"] != $CFG->wwwroot.'/' &&
$_SERVER["HTTP_REFERER"] != $CFG->httpswwwroot.'/login/' &&
$_SERVER["HTTP_REFERER"] != $CFG->httpswwwroot.'/login/index.php')
strpos($_SERVER["HTTP_REFERER"], $CFG->httpswwwroot.'/login/?') !== 0 &&
strpos($_SERVER["HTTP_REFERER"], $CFG->httpswwwroot.'/login/index.php') !== 0) // There might be some extra params such as ?lang=.
? $_SERVER["HTTP_REFERER"] : NULL;
}