MDL-37020 auth_shibboleth: check if target variable is actually set

This commit is contained in:
Charles Fulton 2012-12-05 11:18:37 -08:00
parent 03953061ca
commit ab0ccc6731

View File

@ -7,7 +7,10 @@
$PAGE->set_url('/auth/shibboleth/index.php');
// Support for WAYFless URLs.
$SESSION->wantsurl = optional_param('target', $SESSION->wantsurl, PARAM_LOCALURL);
$target = optional_param('target', '', PARAM_LOCALURL);
if (!empty($target)) {
$SESSION->wantsurl = $target;
}
if (isloggedin() && !isguestuser()) { // Nothing to do
if (isset($SESSION->wantsurl) and (strpos($SESSION->wantsurl, $CFG->wwwroot) === 0)) {