Merge pull request #298 from nbuy/referer_url_check

XOOPS_URL: allow protocol part to be omitted
xoopscube · Nov 1, 2023 · 30b2f80 · 30b2f80
2 parents 1f091e6 + 1baf226
commit 30b2f80
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/html/include/functions.php b/html/include/functions.php
@@ -158,6 +158,8 @@ function xoops_refcheck($docheck=1)
     if ($ref === '') {
         return false;
     }
+    // Allow protocol part to be omitted
+    if (substr(XOOPS_URL, 0, 1)==='/') $ref = preg_replace('/^https?:/', '', $ref);
     //TODO PHP8 'strpos' call can be converted to 'str_starts_with'
     if (strpos($ref, (string) XOOPS_URL) !== 0) {
         return false;