X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=index.php;h=21d5ed275354a052ed3df81dad4bff1b4b2c706c;hb=64ed01f0aff569da2fd4ed589df9ed4ee9852cb7;hp=c40eca7876bbd41353e996d64875ba23b41e727f;hpb=171b4f72ee5a84d2a67b99aca7df9406e68f60c1;p=quix0rs-gnu-social.git diff --git a/index.php b/index.php index c40eca7876..21d5ed2753 100644 --- a/index.php +++ b/index.php @@ -24,32 +24,17 @@ require_once(INSTALLDIR . "/lib/common.php"); $action = $_REQUEST['action']; -if (!$action) { - common_redirect(common_local_url('public')); -} - -# Do an OpenID immediate request if they're not logged in -# and they have an OpenID cookie - -if (!common_logged_in() && - $_SERVER['REQUEST_METHOD'] == 'GET' && - $action != 'finishimmediate') -{ - require_once(INSTALLDIR.'/lib/openid.php'); - $openid_url = oid_get_last(); - if ($openid_url) { - oid_check_immediate($openid_url); - return; - } +if (!$action || !preg_match('/^[a-zA-Z0-9_-]*$/', $action)) { + common_redirect(common_local_url('public')); } $actionfile = INSTALLDIR."/actions/$action.php"; if (file_exists($actionfile)) { - require_once($actionfile); - $action_class = ucfirst($action)."Action"; - $action_obj = new $action_class(); - call_user_func(array($action_obj, 'handle'), $_REQUEST); + require_once($actionfile); + $action_class = ucfirst($action)."Action"; + $action_obj = new $action_class(); + call_user_func(array($action_obj, 'handle'), $_REQUEST); } else { - common_user_error(_t('Unknown action')); + common_user_error(_('Unknown action')); } \ No newline at end of file