diff options
| author | Meik Sievertsen <acydburn@phpbb.com> | 2007-09-22 18:21:58 +0000 |
|---|---|---|
| committer | Meik Sievertsen <acydburn@phpbb.com> | 2007-09-22 18:21:58 +0000 |
| commit | cbb286420fe5cd82687df99a7f146ffc39408dc7 (patch) | |
| tree | 018a68d765bb2ded31a8f8bc667d65183eb4ac1f /phpBB/includes/session.php | |
| parent | d45df55af33046d793230221039222556827d46d (diff) | |
| download | forums-cbb286420fe5cd82687df99a7f146ffc39408dc7.tar forums-cbb286420fe5cd82687df99a7f146ffc39408dc7.tar.gz forums-cbb286420fe5cd82687df99a7f146ffc39408dc7.tar.bz2 forums-cbb286420fe5cd82687df99a7f146ffc39408dc7.tar.xz forums-cbb286420fe5cd82687df99a7f146ffc39408dc7.zip | |
#i61
git-svn-id: file:///svn/phpbb/trunk@8098 89ea8834-ac86-4346-8a33-228a782c2dd0
Diffstat (limited to 'phpBB/includes/session.php')
| -rw-r--r-- | phpBB/includes/session.php | 14 |
1 files changed, 12 insertions, 2 deletions
diff --git a/phpBB/includes/session.php b/phpBB/includes/session.php index 9def5f1edf..d9cc85a154 100644 --- a/phpBB/includes/session.php +++ b/phpBB/includes/session.php @@ -51,18 +51,28 @@ class session $script_name = str_replace(array('\\', '//'), '/', $script_name); // Now, remove the sid and let us get a clean query string... + $use_args = array(); + + // Since some browser do not encode correctly we need to do this with some "special" characters... + // " -> %22, ' => %27, < -> %3C, > -> %3E + $find = array('"', "'", '<', '>'); + $replace = array('%22', '%27', '%3C', '%3E'); + foreach ($args as $key => $argument) { if (strpos($argument, 'sid=') === 0 || strpos($argument, '_f_=') === 0) { - unset($args[$key]); + continue; } + + $use_args[str_replace($find, $replace, $key)] = str_replace($find, $replace, $argument); } + unset($args); // The following examples given are for an request uri of {path to the phpbb directory}/adm/index.php?i=10&b=2 // The current query string - $query_string = trim(implode('&', $args)); + $query_string = trim(implode('&', $use_args)); // basenamed page name (for example: index.php) $page_name = basename($script_name); |