[Phpgroupware-cvs] phpgwapi/inc/class.phpgw.inc.php, 1.42.4.9

[nomail]

Update of /phpgwapi/inc
Modified Files:
        Branch: Version-0_9_16-branch
          class.phpgw.inc.php

date: 2004/09/04 05:58:13;  author: skwashd;  state: Exp;  lines: +18 -2

Log Message:
better handling of external links
=====================================================================
Index: phpgwapi/inc/class.phpgw.inc.php
diff -u phpgwapi/inc/class.phpgw.inc.php:1.42.4.8 
phpgwapi/inc/class.phpgw.inc.php:1.42.4.9
--- phpgwapi/inc/class.phpgw.inc.php:1.42.4.8   Tue Feb 10 13:51:18 2004
+++ phpgwapi/inc/class.phpgw.inc.php    Sat Sep  4 05:58:13 2004
@@ -89,6 +89,22 @@
                {
                        $this->redirect($this->session->link($url, $extravars));
                }
+
+               /**
+               * Safe redirect to external urls
+               *
+               * Stop session theft for "GET" based sessions
+               *
+               * @access public
+               * @param string $url the target url
+               * @returns string safe redirect url
+               * @author Dave Hall
+               */
+               function safe_redirect($url)
+               {
+                       return $GLOBALS['phpgw_info']['server']['webserver_url']
+                               . '/redirect.php?go=' . urlencode($url);
+               }
                
                /**
                * Repsost Prevention Detection
@@ -159,4 +175,4 @@
                }
        } /* end of class */
 
-?>
\ No newline at end of file
+?>