diff options
-rw-r--r-- | Changelog | 1 | ||||
-rw-r--r-- | common.pl | 4 |
2 files changed, 5 insertions, 0 deletions
@@ -38,6 +38,7 @@ Code Quality and API: * LedgerSMB::PE is aware of custom fields (Chris T) * Testing suite added (Seneca) * Moved all database calls to $form->{dbh} (CHris T) +* Form->redirect no longer makes use of exec (Chris T) Packaging: * Added first version of rpm spec from Mads Kiilerich (Chris T) @@ -29,6 +29,10 @@ sub redirect { my @common_attrs = qw(dbh login favicon stylesheet titlebar password); + if (!$script){ # http redirect to login.pl if called w/no args + print "Location: login.pl\n"; + } + $form->error($locale->text("Invalid Redirect")) unless first {$_ eq $script} @{LedgerSMB::Sysconfig::scripts}; |