fixed secure forms handling when POST url contained GET parameters (c…

…ookieless mode and some other forms); merged from MOODLE_16_STABLE
moodle · May 14, 2006 · 70ed990 · 70ed990
1 parent 70cedbf
commit 70ed990
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/lib/weblib.php b/lib/weblib.php
@@ -284,6 +284,11 @@ function match_referer($goodreferer = '') {
 
     if (empty($goodreferer)) {
         $goodreferer = qualified_me();
+        // try to remove everything after ? because POST url may contain GET parameters (SID rewrite, etc.)
+	    $pos = strpos($goodreferer, '?');
+        if ($pos !== FALSE) {
+            $goodreferer = substr($goodreferer, 0, $pos);
+        }
     }
 
     $referer = get_referer();