Use check_refer, so it works with talkpost_do
Patch by wyn.
diffs (12 lines):
diff -r 92cff6a4bafc -r a4021cffa7e5 htdocs/talkpost_do.bml
--- a/htdocs/talkpost_do.bml Sat Aug 22 17:50:15 2009 +0000
+++ b/htdocs/talkpost_do.bml Sat Aug 22 17:55:38 2009 +0000
@@ -48,7 +48,7 @@ body<=
if ($GET{'openid.mode'} eq 'id_res') { # Verify their identity
- unless ($GET{'openid.return_to'} =~
m!^\Q$LJ::SITEROOT\E/talkpost_do\.bml!) {
+ unless ( LJ::check_referer('/talkpost_do.bml',
$GET{'openid.return_to'}) ) {
return LJ::bad_input("Invalid return_to");
}
_______________________________________________
dw-changelog mailing list
[email protected]
http://lists.dwscoalition.org/mailman/listinfo/dw-changelog
