Changeset 1748

Show
Ignore:
Timestamp:
10/05/04 08:35:22 (4 years ago)
Author:
saxmatt
Message:

Changes to how we do redirects.

Files:

Legend:

Unmodified
Added
Removed
Modified
Copied
Moved

  • trunk/wp-admin/options.php

    r1681 r1748  
    8787    $referred = str_replace('?updated=true' , '', $_SERVER['HTTP_REFERER']); 
    8888    $goback = str_replace('?updated=true', '', $_SERVER['HTTP_REFERER']) . '?updated=true'; 
     89    $goback = preg_replace('|[^a-z?=&/~.:_-]|i', '', $goback); 
    8990    header('Location: ' . $goback); 
    9091    break; 

  • trunk/wp-admin/post.php

    r1747 r1748  
    459459    $sendback = $_SERVER['HTTP_REFERER']; 
    460460    if (strstr($sendback, 'post.php')) $sendback = get_settings('siteurl') .'/wp-admin/post.php'; 
     461    $sendback = preg_replace('|[^a-z?=&/~.:_-]|i', '', $sendback); 
    461462    header ('Location: ' . $sendback); 
    462463    do_action('delete_post', $post_id); 

  • trunk/wp-comments-post.php

    r1739 r1748  
    9999header('Pragma: no-cache'); 
    100100$location = (empty($_POST['redirect_to'])) ? $_SERVER["HTTP_REFERER"] : $_POST['redirect_to']; 
     101$location = preg_replace('|[^a-z?=&/~.:_-]|i', '', $location); 
     102 
    101103if ($is_IIS) { 
    102104    header("Refresh: 0;url=$location"); 

  • trunk/wp-login.php

    r1742 r1748  
    140140        $log = $_POST['log']; 
    141141        $pwd = $_POST['pwd']; 
    142         $redirect_to = preg_replace('|[^a-z/~.:_-]|i', '', $_POST['redirect_to']); 
     142        $redirect_to = preg_replace('|[^a-z?=&/~.:_-]|i', '', $_POST['redirect_to']); 
    143143    } 
    144144