From: Friendika Date: Tue, 19 Apr 2011 23:31:39 +0000 (-0700) Subject: follow requests most adhere to site allow policy X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=29a48de5e29841f46791d42d6e329898688914fe;p=friendica.git follow requests most adhere to site allow policy --- diff --git a/boot.php b/boot.php index 763dfc3fe8..1dd5394341 100644 --- a/boot.php +++ b/boot.php @@ -2,7 +2,7 @@ set_time_limit(0); -define ( 'FRIENDIKA_VERSION', '2.1.953' ); +define ( 'FRIENDIKA_VERSION', '2.1.954' ); define ( 'DFRN_PROTOCOL_VERSION', '2.21' ); define ( 'DB_UPDATE_VERSION', 1053 ); diff --git a/mod/follow.php b/mod/follow.php index 23fad81a89..a1412e6c4e 100644 --- a/mod/follow.php +++ b/mod/follow.php @@ -12,6 +12,13 @@ function follow_post(&$a) { $url = $orig_url = notags(trim($_POST['url'])); + if(! allowed_url($url)) { + notice( t('Disallowed profile URL.') . EOL); + goaway($_SESSION['return_url']); + // NOTREACHED + } + + $ret = probe_url($url);