galads/icehrm
1
0
Fork 0
Code Issues Pull Requests Releases Activity

Critical security issue - fix password hash

Browse Source
This commit is contained in:
gamonoid
2018-06-14 03:40:21 +02:00
parent 51e3569501
commit 025a8283ab
4 changed files with 29 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
core/header.php
View File

@@ -25,9 +25,9 @@ if (!defined('MODULE_NAME')) {
}
include 'includes.inc.php';
if(empty($user)){
$actualLink = "http://$_SERVER[HTTP_HOST]$_SERVER[REQUEST_URI]";
header("Location:".CLIENT_BASE_URL."login.php?next=".\Base64Url\Base64Url::encode($actualLink));
if(empty($user) || empty($user->email)){
$actualLinkArray = explode('/',$_SERVER['REQUEST_URI']);
header("Location:".CLIENT_BASE_URL."login.php?next=".\Base64Url\Base64Url::encode($actualLinkArray[count($actualLinkArray) - 1]));
exit();
}