Minahito
minah****@users*****
2005年 12月 30日 (金) 17:21:05 JST
Index: xoops2jp/html/include/functions.php diff -u xoops2jp/html/include/functions.php:1.2.8.3 xoops2jp/html/include/functions.php:1.2.8.4 --- xoops2jp/html/include/functions.php:1.2.8.3 Sat Nov 12 17:45:20 2005 +++ xoops2jp/html/include/functions.php Fri Dec 30 17:21:05 2005 @@ -1,5 +1,5 @@ <?php -// $Id: functions.php,v 1.2.8.3 2005/11/12 08:45:20 minahito Exp $ +// $Id: functions.php,v 1.2.8.4 2005/12/30 08:21:05 minahito Exp $ // ------------------------------------------------------------------------ // // XOOPS - PHP Content Management System // // Copyright (c) 2000 XOOPS.org // @@ -331,9 +331,9 @@ function redirect_header($url, $time = 3, $message = '', $addredirect = true) { global $xoopsConfig, $xoopsRequestUri; - if (preg_match('/javascript:/si', $url) ) { + if (preg_match("/[\\0-\\31]/", $url) || preg_match("/^(javascript|vbscript|about):/i", $url)) { $url = XOOPS_URL; - }; + } if (!defined('XOOPS_CPFUNC_LOADED')) { require_once XOOPS_ROOT_PATH.'/class/template.php'; $xoopsTpl = new XoopsTpl();