blob: 71efc9fb6b0aaf09dc288bbb13ab31cffdf2eb27 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
|
<?php
/* vim: set expandtab sw=4 ts=4 sts=4: */
/**
* URL redirector to avoid leaking Referer with some sensitive information.
*
* @package PhpMyAdmin
*/
/**
* Gets core libraries and defines some variables
*/
define('PMA_MINIMUM_COMMON', true);
require_once './libraries/common.inc.php';
if (! PMA_isValid($_GET['url'])
|| ! preg_match('/^https?:\/\/[^\n\r]*$/', $_GET['url'])
|| ! PMA_isAllowedDomain($_GET['url'])
) {
header('Location: ' . $cfg['PmaAbsoluteUri']);
} else {
// JavaScript redirection is necessary. Because if header() is used
// then web browser sometimes does not change the HTTP_REFERER
// field and so with old URL as Referer, token also goes to
// external site.
echo "<script type='text/javascript'>
window.onload=function(){
window.location='" . htmlspecialchars($_GET['url']) . "';
}
</script>";
// Display redirecting msg on screen.
printf(__('Taking you to %s.'), htmlspecialchars($_GET['url']));
}
die();
?>
|
