Changeset 2084 in ExiteCMS for trunk/setuser.php

Timestamp:

11/30/08 00:05:15 (3 years ago)

Author:

WanWizard

Message:

one more fix to prevent redirect loops if a user double clicks the logout link

File:

• trunk/setuser.php (modified) (1 diff)

trunk/setuser.php

@@ -134 +134 @@
 // make sure the error variable has a value
 if (!isset($error) || !isNum($error)) $error = 0;
-
-// set the redirect url (set in theme_cleanup), butnot when in maintenance!
+// set the redirect url (set in theme_cleanup), but not when in maintenance!
 if (isset($_SERVER['HTTP_REFERER']) && eregi("maintenance.php", $_SERVER['HTTP_REFERER'])) {
     $variables['url'] = BASEDIR."index.php";
-} elseif (isset($_SERVER['HTTP_REFERER']) && eregi("setuser.php", $_SERVER['HTTP_REFERER'])) {
-    $variables['url'] = BASEDIR."index.php";
-} elseif (isset($_SESSION['last_url'])) {
+} elseif (isset($_SESSION['last_url']) &&  !eregi("setuser.php", $_SESSION['last_url'])) {
     $variables['url'] = $_SESSION['last_url'];
 } elseif (empty($_SERVER['HTTP_REFERER'])) {