Don't allow redirect to external website

This commit is contained in:
slawkens
2024-04-08 19:05:42 +02:00
parent 7181b988e9
commit ef62b53cec
2 changed files with 7 additions and 6 deletions

View File

@@ -42,12 +42,6 @@ if(ACTION === 'logout' && !isset($_REQUEST['account_login'])) {
$logged = false;
unset($account_logged);
if(isset($_REQUEST['redirect']))
{
header('Location: ' . urldecode($_REQUEST['redirect']));
exit;
}
}
}
}