xpressengine / xe-core

			{

				$url = base64_decode(self::get('url'));

				$url_info = parse_url($url);

				if(!Password::checkSignature($url, self::get('sig')))

				{

					echo self::get('lang')->msg_invalid_request;

					return false;

				}

				$url_info['query'].= ($url_info['query'] ? '&' : '') . 'SSOID=' . urlencode(session_id()) . '&sig=' . urlencode(Password::createSignature(session_id()));

				$redirect_url = sprintf('%s://%s%s%s?%s', $url_info['scheme'], $url_info['host'], $url_info['port'] ? ':' . $url_info['port'] : '', $url_info['path'], $url_info['query']);

			// result handling : set session_name()

			if($session_name = self::get('SSOID'))

			{

				if(!Password::checkSignature($session_name, self::get('sig')))

				{

					echo self::get('lang')->msg_invalid_request;

					return false;

				}

				setcookie(session_name(), $session_name);