Skip to content

Commit 09c99eb

Browse files
authored
improved secure login
1 parent b9ea403 commit 09c99eb

File tree

1 file changed

+15
-8
lines changed

1 file changed

+15
-8
lines changed

web/inc/secure_login.php

Lines changed: 15 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,19 @@
11
<?php
2-
if (!defined('NO_AUTH_REQUIRED2')) {
3-
if (file_exists('/usr/local/vesta/web/inc/login_url.php')) {
4-
require_once('/usr/local/vesta/web/inc/login_url.php');
5-
if (isset($_GET[$login_url])) {
6-
setcookie($login_url, '1', time() + 31536000, '/', $_SERVER['HTTP_HOST'], true);
7-
header ("Location: /login/");
8-
exit;
2+
$login_url_skip=0;
3+
if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web/reset/mail/index.php') $login_url_skip=1;
4+
if ($_SERVER['SCRIPT_FILENAME']=='/usr/local/vesta/web//reset/mail/index.php') $login_url_skip=1;
5+
6+
if ($login_url_skip==0) {
7+
if (!isset($login_url_loaded)) {
8+
$login_url_loaded=1;
9+
if (file_exists('/usr/local/vesta/web/inc/login_url.php')) {
10+
require_once('/usr/local/vesta/web/inc/login_url.php');
11+
if (isset($_GET[$login_url])) {
12+
setcookie($login_url, '1', time() + 31536000, '/', $_SERVER['HTTP_HOST'], true);
13+
header ("Location: /login/");
14+
exit;
15+
}
16+
if (!isset($_COOKIE[$login_url])) exit;
917
}
10-
if (!isset($_COOKIE[$login_url])) exit;
1118
}
1219
}

0 commit comments

Comments
 (0)