Context Navigation

Changeset 1506871

Timestamp:

10/02/2016 04:56:37 PM (10 years ago)

Author:

luke7263

Message:

updated connector.php: accepts only referer from current host and redirect to its home page if referer not ok

File:

-                      r1499441
+                      r1506871
 $referer = $_SERVER['HTTP_REFERER'];
 $servername = $_SERVER['SERVER_NAME'];
+if (strncmp ($referer, "http://$servername/", strlen($servername) + 8) && strncmp ($referer, "https://$servername/", strlen($servername) + 9))
+if (empty($_SERVER['HTTPS']))
+    $goodurl = "http://$servername";
+else
+    $goodurl = "https://$servername";
+if (strncmp ($referer, $goodurl, strlen($goodurl)))
+{
     echo "Cannot be launched that way.";
+    header("Location: " . $goodurl);
     exit;
+}

Note: See TracChangeset for help on using the changeset viewer.