From cfb9a57d5e089ffe239a0836bcdb1d81fead0f97 Mon Sep 17 00:00:00 2001 From: muink Date: Sat, 26 Nov 2022 21:22:34 +0800 Subject: [PATCH] Fix the problem of login failure when $root_url is defined (#896) Fix the problem that `FM_ROOT_URL` and `$_SERVER['REQUEST_URI']` are repeated, causing login redirection to fail when `$root_url` is defined --- tinyfilemanager.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/tinyfilemanager.php b/tinyfilemanager.php index e563bf9..1d0ee6c 100644 --- a/tinyfilemanager.php +++ b/tinyfilemanager.php @@ -299,11 +299,11 @@ if ($use_auth) { if (isset($auth_users[$_POST['fm_usr']]) && isset($_POST['fm_pwd']) && password_verify($_POST['fm_pwd'], $auth_users[$_POST['fm_usr']]) && verifyToken($_POST['token'])) { $_SESSION[FM_SESSION_ID]['logged'] = $_POST['fm_usr']; fm_set_msg(lng('You are logged in')); - fm_redirect(FM_ROOT_URL . $_SERVER['REQUEST_URI']); + fm_redirect($_SERVER['REQUEST_URI']); } else { unset($_SESSION[FM_SESSION_ID]['logged']); fm_set_msg(lng('Login failed. Invalid username or password'), 'error'); - fm_redirect(FM_ROOT_URL . $_SERVER['REQUEST_URI']); + fm_redirect($_SERVER['REQUEST_URI']); } } else { fm_set_msg(lng('password_hash not supported, Upgrade PHP version'), 'error');;