[login] fix url redirection (#6325)

* prevent open redirection attack
2022-03-10 20:10:16 -07:00
parent df1bed913c
commit 81666dd882
2 changed files with 15 additions and 1 deletions
@@ -254,6 +254,10 @@
 		$_SESSION['login']['destination']['url'] = PROJECT_PATH."/core/dashboard/";
 	}

+	if (strlen($_REQUEST['path']) > 0) {
+		$_SESSION['redirect_path'] = $_REQUEST['path'];
+	}
+
 //add the header
 	$document['title'] = $text['title-login'];
 	include "resources/header.php";