diff --git a/course/jumpto.php b/course/jumpto.php index 819681377a2..2a5ae23874d 100644 --- a/course/jumpto.php +++ b/course/jumpto.php @@ -1,19 +1,23 @@ wwwroot) === 0) { redirect(urldecode($jump)); - }*/ - - redirect($_SERVER['HTTP_REFERER']); + } else { + if (preg_match('/^[a-z]+\.php\?/', $jump)) { + redirect(urldecode($jump)); + } else { + redirect($_SERVER['HTTP_REFERER']); + } + } ?>