Retrieve parameters from $_GET in url.php

Signed-off-by: Maurício Meneghini Fauth <mauriciofauth@gmail.com>

1 files changed, 5 insertions, 5 deletions

diff --git a/url.php b/url.php
index c56ed1f655..edaab5acba 100644
--- a/url.php
+++ b/url.php
@@ -21,9 +21,9 @@ $response = Response::getInstance();
 $response->getHeader()->sendHttpHeaders();
 $response->disable();
 
-if (! Core::isValid($_REQUEST['url'])
-    || ! preg_match('/^https:\/\/[^\n\r]*$/', $_REQUEST['url'])
-    || ! Core::isAllowedDomain($_REQUEST['url'])
+if (! Core::isValid($_GET['url'])
+    || ! preg_match('/^https:\/\/[^\n\r]*$/', $_GET['url'])
+    || ! Core::isAllowedDomain($_GET['url'])
 ) {
     Core::sendHeaderLocation('./');
 } else {
@@ -33,11 +33,11 @@ if (! Core::isValid($_REQUEST['url'])
     //  external site.
     echo "<script type='text/javascript'>
             window.onload=function(){
-                window.location='" , Sanitize::escapeJsString($_REQUEST['url']) , "';
+                window.location='" , Sanitize::escapeJsString($_GET['url']) , "';
             }
         </script>";
     // Display redirecting msg on screen.
-    // Do not display the value of $_REQUEST['url'] to avoid showing injected content
+    // Do not display the value of $_GET['url'] to avoid showing injected content
     echo __('Taking you to the target site.');
 }
 die();