From 6fe5014da0eaae652dd28ba0c92318535359744d Mon Sep 17 00:00:00 2001
From: Paul Richards <paul@mantisforge.org>
Date: Sun, 22 Jul 2007 10:16:08 +0000
Subject: [PATCH] fix: 0008180: Potential URL redirection flaw in login.php

git-svn-id: http://mantisbt.svn.sourceforge.net/svnroot/mantisbt/trunk@4463 f5dc347c-c33d-0410-90a0-b07cc1902cb9
---
 login.php | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/login.php b/login.php
index 821ed3096f..474c3c0ea8 100644
--- a/login.php
+++ b/login.php
@@ -6,7 +6,7 @@
 	# See the README and LICENSE files for details
 
 	# --------------------------------------------------------
-	# $Id: login.php,v 1.37 2007-03-03 14:54:15 prichards Exp $
+	# $Id: login.php,v 1.38 2007-07-22 10:16:08 prichards Exp $
 	# --------------------------------------------------------
 ?>
 <?php
@@ -41,9 +41,9 @@
 	}
 
 	if ( auth_attempt_login( $f_username, $f_password, $f_perm_login ) ) {
-		$t_redirect_url = 'login_cookie_test.php?return=' . urlencode( $f_return );
+		$t_redirect_url = 'login_cookie_test.php?return=' . string_sanitize_url( $f_return );
 	} else {
-		$t_redirect_url = 'login_page.php?return=' . urlencode( $f_return ) . '&error=1';
+		$t_redirect_url = 'login_page.php?return=' . string_sanitize_url( $f_return ) . '&error=1';
 
 		if ( HTTP_AUTH == config_get( 'login_method' ) ) {
 			auth_http_prompt();