From dc6ffd411b255a95cea27f4ce8ad97fb0954e209 Mon Sep 17 00:00:00 2001 From: "Paul S. Owen" Date: Wed, 24 Mar 2004 14:43:31 +0000 Subject: [PATCH] Redirect to (admin) index if sid not present in URL ... check this, at least it shouldn't allow any nasty misuse while indicating to the admin a possible problem exists. However need to ensure all ACP scripts are behaving correctly and appending sid to all relevant links/actions git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4873 89ea8834-ac86-4346-8a33-228a782c2dd0 --- phpBB/admin/pagestart.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/phpBB/admin/pagestart.php b/phpBB/admin/pagestart.php index 2590bf88ff..05e5d39b33 100644 --- a/phpBB/admin/pagestart.php +++ b/phpBB/admin/pagestart.php @@ -56,7 +56,7 @@ if ($HTTP_GET_VARS['sid'] != $userdata['session_id']) $url = preg_replace('/\?$/', '', $url); $url .= ((strpos($url, '?')) ? '&' : '?') . 'sid=' . $userdata['session_id']; - redirect($url); + redirect("index.$phpEx?sid=" . $userdata['session_id']); } if (empty($no_page_header))