Redirect to (admin) index if sid not present in URL ... check this, at least it shouldn't allow any nasty misuse while indicating to the admin a possible problem exists. However need to ensure all ACP scripts are behaving correctly and appending sid to all relevant links/actions

git-svn-id: file:///svn/phpbb/branches/phpBB-2_0_0@4873 89ea8834-ac86-4346-8a33-228a782c2dd0
This commit is contained in:
Paul S. Owen 2004-03-24 14:43:31 +00:00
parent f4b530e065
commit dc6ffd411b

View file

@ -56,7 +56,7 @@ if ($HTTP_GET_VARS['sid'] != $userdata['session_id'])
$url = preg_replace('/\?$/', '', $url); $url = preg_replace('/\?$/', '', $url);
$url .= ((strpos($url, '?')) ? '&' : '?') . 'sid=' . $userdata['session_id']; $url .= ((strpos($url, '?')) ? '&' : '?') . 'sid=' . $userdata['session_id'];
redirect($url); redirect("index.$phpEx?sid=" . $userdata['session_id']);
} }
if (empty($no_page_header)) if (empty($no_page_header))