Project

General

Profile

« Previous | Next » 

Revision 1596

Added by Dietmar over 12 years ago

highly critical security-fix
announced on http://www.darksecurity.de/advisories/2012/SSCHADV2012-003.txt

View differences:

logout.php
22 22
	setcookie('REMEMBER_KEY', '', time()-3600, '/');
23 23
}
24 24

  
25
$redirect = ((isset($_SERVER['HTTP_REFERER']) && !empty($_SERVER['HTTP_REFERER'])) ?  $_SERVER['HTTP_REFERER'] : WB_URL.'/index.php');
25
$redirect = ((isset($_SERVER['HTTP_REFERER']) && $_SERVER['HTTP_REFERER'] != '') ?  $_SERVER['HTTP_REFERER'] : WB_URL.'/index.php');
26 26

  
27 27
$_SESSION['USER_ID'] = null;
28 28
$_SESSION['GROUP_ID'] = null;

Also available in: Unified diff