View Issue Detail

ID	Project	Category	Submitted / Last Updated
01433	UserSpice	ACP Code	2021-12-11 23:42:18 / 2024-03-18 08:28:01
Reported	Dan Hoover	Assigned To	Unassigned
Priority	none	Reported	5.3.8
Status	feature-request	Resolution Version and Commit
Summary	Fix redirect on login function
Description	needs work to prevent double users // retrieve ?dest=page and check that it exists //or is in the Config::get('whitelisted_destinations') if (!function_exists('sanitizedDest')) { function sanitizedDest($varname = 'dest') { global $abs_us_root,$us_url_root; if ($dest = Input::get($varname)) { if(file_exists($abs_us_root.$us_url_root.$dest) \|\| file_exists($abs_us_root.$us_url_root.$dest.".php")){ return $dest; } // if the administrator has intentionally whitelisted a destination it is legitimate if ($whitelist = Config::get('whitelisted_destinations')) { if (in_array($dest, (array) $whitelist)) { return $dest; } } } return false; } }