From bc2d46b36ec01f11822c1f5bece85f2a16daf6e8 Mon Sep 17 00:00:00 2001 From: Kijin Sung Date: Thu, 23 Mar 2023 22:53:47 +0900 Subject: [PATCH] =?UTF-8?q?#2091=20=EB=B3=B4=EC=99=84=20-=20=EA=B0=80?= =?UTF-8?q?=EC=9E=85=20URL=20=EB=93=B1=20=EB=AA=87=20=EA=B0=80=EC=A7=80=20?= =?UTF-8?q?=EB=8D=94=20=EC=B6=94=EA=B0=80?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- modules/member/member.view.php | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/modules/member/member.view.php b/modules/member/member.view.php index 03e7bc80a..9a67fe07f 100644 --- a/modules/member/member.view.php +++ b/modules/member/member.view.php @@ -633,7 +633,16 @@ class MemberView extends Member { // Get referer URL $referer_url = Context::get('referer_url') ?: ($_SERVER['HTTP_REFERER'] ?? ''); - if (!$referer_url || !Rhymix\Framework\URL::isInternalURL($referer_url) || contains('procMember', $referer_url) || contains('dispMemberLoginForm', $referer_url) || contains('/login', $referer_url)) + $is_valid_referer = !empty($referer_url) && Rhymix\Framework\URL::isInternalURL($referer_url); + if (preg_match('!\b(dispMemberLoginForm|dispMemberSignUpForm|dispMemberFindAccount|dispMemberResendAuthMail|procMember)!', $referer_url)) + { + $is_valid_referer = false; + } + if (preg_match('!/(login|signup)\b!', $referer_url)) + { + $is_valid_referer = false; + } + if (!$is_valid_referer) { $referer_url = getNotEncodedUrl('act', ''); }