fixed secure forms handling when POST url contained GET parameters (cookieless mode and some other forms); merged from MOODLE_16_STABLE

2006-05-14 21:21:35 +00:00
parent 70cedbfd5d
commit 70ed990ed2
1 changed files with 5 additions and 0 deletions
@@ -284,6 +284,11 @@ function match_referer($goodreferer = '') {

    if (empty($goodreferer)) {
        $goodreferer = qualified_me();
+        // try to remove everything after ? because POST url may contain GET parameters (SID rewrite, etc.)
+	    $pos = strpos($goodreferer, '?');
+        if ($pos !== FALSE) {
+            $goodreferer = substr($goodreferer, 0, $pos);
+        }
    }

    $referer = get_referer();