Forum OpenACS Development: Re: Problem with return_url check in login.tcl

Collapse
3: Re: Problem with return_url check in login.tcl (response to 1)
Posted by Dave Bauer on 04/19/07 08:40 PM
Simplified.
if { [exists_and_not_null return_url] } {
    if {[util_complete_url_p $return_url]
        && ![string match "[string trimright [subsite::get_url -absolute_p 1 -protocol http] /]/*" $return_url]
        && ![string match "[string trimright [subsite::get_url -absolute_p 1 -protocol https] /]/*" $return_url]} {
      ad_returnredirect -message "only urls without a host name are permitted" "."
      ad_script_abort
    }
} else {
    set return_url [ad_pvt_home]
}