From 592328eeb0d5fbcf8c72ae084448a75c6e4469d9 Mon Sep 17 00:00:00 2001
From: Kijin Sung <kijin@kijinsung.com>
Date: Wed, 14 Oct 2015 11:36:11 +0900
Subject: [PATCH] =?UTF-8?q?SSL=20=EC=84=A0=ED=83=9D=EC=A0=81=20=EC=82=AC?=
 =?UTF-8?q?=EC=9A=A9=EC=8B=9C=20XEDITION=20=EB=A0=88=EC=9D=B4=EC=95=84?=
 =?UTF-8?q?=EC=9B=83=EC=9D=98=20=EB=A1=9C=EA=B7=B8=EC=9D=B8=20=ED=8C=9D?=
 =?UTF-8?q?=EC=97=85=EC=97=90=20SSL=EC=9D=B4=20=EC=A0=81=EC=9A=A9=EB=90=98?=
 =?UTF-8?q?=EC=A7=80=20=EC=95=8A=EB=8A=94=20=EB=AC=B8=EC=A0=9C=20=EC=88=98?=
 =?UTF-8?q?=EC=A0=95?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 config/func.inc.php          | 12 ++++++++++++
 layouts/xedition/layout.html |  4 ++--
 2 files changed, 14 insertions(+), 2 deletions(-)

diff --git a/config/func.inc.php b/config/func.inc.php
index f47e5b978..06434d2c5 100644
--- a/config/func.inc.php
+++ b/config/func.inc.php
@@ -471,6 +471,18 @@ function getFullSiteUrl()
 	return $url;
 }
 
+/**
+ * Return the exact url of the current page
+ *
+ * @return string
+ */
+function getCurrentPageUrl()
+{
+	$protocol = $_SERVER['HTTPS'] == 'on' ? 'https://' : 'http://';
+	$url = $protocol . $_SERVER['HTTP_HOST'] . $_SERVER['REQUEST_URI'];
+	return htmlspecialchars($url, ENT_COMPAT, 'UTF-8', FALSE);
+}
+
 /**
  * Return if domain of the virtual site is url type or id type
  *
diff --git a/layouts/xedition/layout.html b/layouts/xedition/layout.html
index dc38c065b..6a9e38cff 100644
--- a/layouts/xedition/layout.html
+++ b/layouts/xedition/layout.html
@@ -448,9 +448,9 @@
 			<h1>LOGIN</h1>
 		</div>
 		<div class="login-body">
-			<form action="{getUrl()}" method="post" autocomplete="off">
+			<form action="{getUrl('', 'act', 'procMemberLogin')}" method="post" autocomplete="off">
 				<input type="hidden" name="act" value="procMemberLogin" />
-				<input type="hidden" name="success_return_url" value="{htmlspecialchars(getRequestUriByServerEnviroment(), ENT_COMPAT | ENT_HTML401, 'UTF-8', FALSE)}" />
+				<input type="hidden" name="success_return_url" value="{getCurrentPageUrl()}" />
 				<input type="hidden" name="xe_validator_id" value="layouts/xedition/layout/1" />
 				<fieldset>
 					<legend class="blind">{$lang->cmd_login}</legend>