remove hard-coded /admin/ path; relocatable

Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
This commit is contained in:
Glenn Strauss
2022-12-18 23:09:57 -05:00
committed by Adam Warner
parent ec7b7536c6
commit d94d86bad8

View File

@@ -68,7 +68,11 @@ function verifyPassword($pwhash, $use_api = false)
$_SESSION['auth'] = true;
// Login successful, redirect the user to the original requested page
if ($_SERVER['REQUEST_METHOD'] === 'POST' && $_SERVER['SCRIPT_NAME'] === '/admin/login.php') {
if (
$_SERVER['REQUEST_METHOD'] === 'POST' &&
strlen($_SERVER['SCRIPT_NAME']) >= 10 &&
substr_compare($_SERVER['SCRIPT_NAME'], '/login.php', -10) === 0
) {
header('Location: '.$redirect_url);
exit;
}