onokazu
onoka****@users*****
2005年 10月 24日 (月) 20:26:51 JST
Index: xoops2jp/html/include/functions.php diff -u xoops2jp/html/include/functions.php:1.5 xoops2jp/html/include/functions.php:1.5.2.1 --- xoops2jp/html/include/functions.php:1.5 Mon Sep 5 05:46:09 2005 +++ xoops2jp/html/include/functions.php Mon Oct 24 20:26:51 2005 @@ -1,5 +1,5 @@ <?php -// $Id: functions.php,v 1.5 2005/09/04 20:46:09 onokazu Exp $ +// $Id: functions.php,v 1.5.2.1 2005/10/24 11:26:51 onokazu Exp $ // ------------------------------------------------------------------------ // // XOOPS - PHP Content Management System // // Copyright (c) 2000 XOOPS.org // @@ -388,9 +388,9 @@ function redirect_header($url, $time = 3, $message = '', $addredirect = true) { global $xoopsConfig, $xoopsRequestUri; - if (preg_match('/javascript:/si', $url) ) { + if (preg_match("/[\\0-\\31]/", $url) || preg_match("/^(javascript|vbscript|about):/i", $url)) { $url = XOOPS_URL; - }; + } if (!defined('XOOPS_CPFUNC_LOADED')) { require_once XOOPS_ROOT_PATH.'/class/template.php'; $xoopsTpl = new XoopsTpl();