don't inline p's in the people list

[quix0rs-gnu-social.git] / index.php

diff --git a/index.php b/index.php
index c40eca7876bbd41353e996d64875ba23b41e727f..514146c78df1f3f7b97fae0e6d43d69a85b10f94 100644 (file)
--- a/index.php
+++ b/index.php
@@ -24,25 +24,10 @@ require_once(INSTALLDIR . "/lib/common.php");
 
 $action = $_REQUEST['action'];
 
-if (!$action) {
+if (!$action || !preg_match('/^[a-zA-Z0-9_-]*$/', $action)) {
        common_redirect(common_local_url('public'));
 }
 
-# Do an OpenID immediate request if they're not logged in
-# and they have an OpenID cookie
-
-if (!common_logged_in() &&
-       $_SERVER['REQUEST_METHOD'] == 'GET' &&
-       $action != 'finishimmediate')
-{
-       require_once(INSTALLDIR.'/lib/openid.php');
-       $openid_url = oid_get_last();
-       if ($openid_url) {
-               oid_check_immediate($openid_url);
-               return;
-       }
-}
-
 $actionfile = INSTALLDIR."/actions/$action.php";
 
 if (file_exists($actionfile)) {