0007055: invalid redirect url returned from string_sanitize_url - MantisBT

Mantis Bug Tracker

View Issue Details [ Jump to Notes ] [ Wiki ]

[ Issue History ] [ Print ]

ID

Project

Category

View Status

Date Submitted

Last Update

0007055

mantisbt

bugtracker

public

2006-05-08 14:16

2006-09-12 00:54

Reporter

jugg

Assigned To

vboctor

Priority

normal

Severity

major

Reproducibility

always

Status

closed

Resolution

duplicate

Platform

OS

OS Version

Product Version

1.0.3

Target Version

Fixed in Version

Summary

0007055: invalid redirect url returned from string_sanitize_url

Description

When viewing an issue in the bugtracker, then clicking the login link, and logging on, you will be redirected to an invalid url.

Example:

viewing:
http://domain/view.php?id=100 [^]

login:
http://domain/login_page.php?return=%2Fview.php%3Fid%3D16 [^]

invalid (missing '?'):
http://domain/view.phpid=100 [^]

Additional Information

The change between 1.0.2 and 1.0.3 which caused this problem is:

./core/string_api.php line 193

v1.0.2
if ( strpos( '?', $t_url ) !== FALSE ) {

v1.0.3
if ( strpos( $t_url, '?' ) !== FALSE ) {

swapping it back to v1.0.2 method allows it to work. However, I think the root of the problem is elsewhere, as the v1.0.3 usage is the correct documented use of strpos.

Tags

No tags attached.

Relationships

duplicate of	0007051	closed	thraxisp	Fix for 0006869 / 0007034 removes quoted "?" from arguments
has duplicate	0007073	closed	ryandesign	Display of Link in notification-mail fails after Login with User-ID and password
has duplicate	0007078	closed	ryandesign	It's not possible to delete a notice in v 1.03
related to	0007282	closed	ryandesign	invalid redirect url returned from string_sanitize_url when incuding # anchor

Notes
There are no notes attached to this issue.

Issue History
Date Modified	Username	Field	Change
2006-05-08 14:16	jugg	New Issue
2006-05-08 16:06	vboctor	Relationship added	duplicate of 0007051
2006-05-08 16:06	vboctor	Duplicate ID	0 => 7051
2006-05-08 16:06	vboctor	Status	new => resolved
2006-05-08 16:06	vboctor	Resolution	open => duplicate
2006-05-08 16:06	vboctor	Assigned To	=> vboctor
2006-05-16 14:16	ryandesign	Relationship added	has duplicate 0007073
2006-05-16 14:19	ryandesign	Relationship added	has duplicate 0007078
2006-05-23 13:20	ericb	Issue Monitored: ericb
2006-05-24 16:31	mmokluk	Issue Monitored: mmokluk
2006-07-25 12:32	ryandesign	Relationship added	related to 0007282
2006-09-12 00:54	vboctor	Status	resolved => closed

MantisBT 1.2.2 git master-1.2.x[^]

Copyright © 2000 - 2010 MantisBT Group

Time: 0.2200 seconds.
memory usage: 1,969 KB