Changeset 790 for trunk

Timestamp:

Apr 6, 2023 12:06:49 AM (13 months ago)

Author:

anonymous

Message:

Fix signing_key bug

Location:

trunk

Files:

• lib/App.inc.php (modified) (2 diffs)
• services/login.php (modified) (1 diff)

trunk/lib/App.inc.php

@@ -429 +429 @@
                 $this->setParam(array('db_pass' => $_SERVER['DB_PASS']));
             }
-            unset($_SERVER['DB_SERVER'], $_SERVER['DB_NAME'], $_SERVER['DB_USER'], $_SERVER['DB_PASS'], $_SERVER['SIGNING_KEY']);
+            unset($_SERVER['DB_SERVER'], $_SERVER['DB_NAME'], $_SERVER['DB_USER'], $_SERVER['DB_PASS']);
 
             // DB credentials for CLI scripts stored in a JSON file with read rights given only to the user who will be executing the scripts: -r--------
@@ -580 +580 @@
             $this->setParam(array('signing_key' => $_SERVER['SIGNING_KEY']));
         }
+        unset($_SERVER['SIGNING_KEY']);
 
         // Character set. This should also be printed in the html header template.

trunk/services/login.php

@@ -39 +39 @@
 
 if ($auth->isLoggedIn()) {
-    if ($app->validBoomerangURL('login')) {
+    if ($app->validBoomerangURL('login') && mb_stripos($app->getBoomerangURL('login'), '/login.php') === false) {
         $app->dieBoomerangURL('login');
     }