mirror of
https://github.com/itflow-org/itflow
synced 2026-02-28 02:44:53 +00:00
updated
fixed domain url from config to prevent open redirect issue and encoded uri
This commit is contained in:
@@ -218,8 +218,8 @@ if (isset($_POST['login'])) {
|
||||
//}
|
||||
|
||||
}
|
||||
if($_GET['url'])
|
||||
header("Location: ".$_GET['url']);
|
||||
if($_GET['last_visited'])
|
||||
header("Location: ".$_SERVER["REQUEST_SCHEME"] . "://" . $config_base_url . base64_decode($_GET['last_visited']) );
|
||||
else
|
||||
header("Location: $config_start_page");
|
||||
|
||||
|
||||
Reference in New Issue
Block a user