fixed domain url from config to prevent open redirect issue and encoded uri
This commit is contained in:
Hugo Sampaio
2024-05-03 09:34:50 -03:00
parent b8c529c2ec
commit bab66bf769
2 changed files with 3 additions and 4 deletions

View File

@@ -218,8 +218,8 @@ if (isset($_POST['login'])) {
//}
}
if($_GET['url'])
header("Location: ".$_GET['url']);
if($_GET['last_visited'])
header("Location: ".$_SERVER["REQUEST_SCHEME"] . "://" . $config_base_url . base64_decode($_GET['last_visited']) );
else
header("Location: $config_start_page");