summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDries Buytaert <dries@buytaert.net>2003-06-07 15:59:49 +0000
committerDries Buytaert <dries@buytaert.net>2003-06-07 15:59:49 +0000
commit23423b46fb7731eaa0ad280eff9b182ef7cfb548 (patch)
tree39b13dbfad3626e1fcbaa4f61a09ccf1fc0039a6
parent2fc741867d6e1486412bb7c8ad8ac362f47429a8 (diff)
downloadbrdo-23423b46fb7731eaa0ad280eff9b182ef7cfb548.tar.gz
brdo-23423b46fb7731eaa0ad280eff9b182ef7cfb548.tar.bz2
- Check the destrination URL before redirecting.
-rw-r--r--modules/user.module2
-rw-r--r--modules/user/user.module2
2 files changed, 2 insertions, 2 deletions
diff --git a/modules/user.module b/modules/user.module
index c9e645199..e7935c7c3 100644
--- a/modules/user.module
+++ b/modules/user.module
@@ -605,7 +605,7 @@ function user_login($edit = array(), $msg = "") {
** Redirect the user to the page he logged on from.
*/
- drupal_goto($edit["destination"]);
+ drupal_goto(check_url($edit["destination"]));
}
else {
if (!$error) {
diff --git a/modules/user/user.module b/modules/user/user.module
index c9e645199..e7935c7c3 100644
--- a/modules/user/user.module
+++ b/modules/user/user.module
@@ -605,7 +605,7 @@ function user_login($edit = array(), $msg = "") {
** Redirect the user to the page he logged on from.
*/
- drupal_goto($edit["destination"]);
+ drupal_goto(check_url($edit["destination"]));
}
else {
if (!$error) {