Fix #2288 allow redirect after logout, only if the target URL is internal

This commit is contained in:
Kijin Sung 2024-01-30 21:37:43 +09:00
parent a36d728ad9
commit 00db22abdb
2 changed files with 21 additions and 5 deletions

View file

@ -897,12 +897,19 @@ class MemberView extends Member
// Redirect if not logged in.
if(!Context::get('is_logged'))
{
$this->setRedirectUrl(getNotEncodedUrl('act', ''));
$this->setRedirectUrl(getNotEncodedUrl('act', '', 'redirect_url', ''));
return;
}
$output = MemberController::getInstance()->procMemberLogout();
$this->setRedirectUrl(isset($output->redirect_url) ? $output->redirect_url : getNotEncodedUrl('act', ''));
if (!empty($output->redirect_url))
{
$this->setRedirectUrl($output->redirect_url);
}
else
{
$this->setRedirectUrl(getNotEncodedUrl('act', '', 'redirect_url', ''));
}
}
/**