mirror of
https://github.com/Pathduck/gallery3.git
synced 2026-05-20 03:19:13 -04:00
Create a new method in MY_url.php "get_item_from_uri" which loads the item
based on the uri. Then use this helper method in logout.php to insure that the guest user has access to the "continue" uri. If they don't redirect to the root album and let it deal with access issues. Signed-off-by: Tim Almdal <tnalmdal@shaw.ca>
This commit is contained in:
@@ -26,7 +26,12 @@ class Logout_Controller extends Controller {
|
||||
log::info("user", t("User %name logged out", array("name" => $user->name)),
|
||||
html::anchor("user/$user->id", $user->name));
|
||||
if ($this->input->get("continue")) {
|
||||
url::redirect($this->input->get("continue"));
|
||||
$item = url::get_item_from_uri($this->input->get("continue"));
|
||||
if (access::can("view", $item)) {
|
||||
url::redirect($this->input->get("continue"));
|
||||
} else {
|
||||
url::redirect("");
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user