Changeset 3896 for branches/1.1/bb-login.php

Timestamp:

05/12/2012 09:25:55 PM (12 years ago)

Author:

westi

Message:

Make sure the redirect url is a string before we try and handle it.

File:

• branches/1.1/bb-login.php (modified) (2 diffs)

branches/1.1/bb-login.php

@@ -13 +13 @@
 
 // Look for 'redirect_to'
-if ( isset( $_REQUEST['redirect_to'] ) )
+if ( isset( $_REQUEST['redirect_to'] ) && is_string( $_REQUEST['redirect_to'] ) )
     $re = $_REQUEST['redirect_to'];
 
     // Look for 're'
-    if ( empty( $re ) && isset( $_REQUEST['re'] ) )
+    if ( empty( $re ) && isset( $_REQUEST['re'] )  && is_string( $_REQUEST['re'] ) )
         $re = $_REQUEST['re'];
 
@@ -32 +32 @@
                 if ( false !== strpos( $re, $home_path . 'register.php' ) || false !== strpos( $re, $home_path . 'bb-reset-password.php' ) )
                     $re = bb_get_uri( null, null, BB_URI_CONTEXT_HEADER );
+
             }