| @@ 675-679 (lines=5) @@ | ||
| 672 | { |
|
| 673 | $url = base64_decode(self::get('url')); |
|
| 674 | $url_info = parse_url($url); |
|
| 675 | if(!Password::checkSignature($url, self::get('sig'))) |
|
| 676 | { |
|
| 677 | echo self::get('lang')->msg_invalid_request; |
|
| 678 | return false; |
|
| 679 | } |
|
| 680 | ||
| 681 | $oModuleModel = getModel('module'); |
|
| 682 | $domain = $url_info['host'] . $url_info['path']; |
|
| @@ 706-710 (lines=5) @@ | ||
| 703 | // result handling : set session_name() |
|
| 704 | if($session_name = self::get('SSOID')) |
|
| 705 | { |
|
| 706 | if(!Password::checkSignature($session_name, self::get('sig'))) |
|
| 707 | { |
|
| 708 | echo self::get('lang')->msg_invalid_request; |
|
| 709 | return false; |
|
| 710 | } |
|
| 711 | ||
| 712 | setcookie(session_name(), $session_name); |
|
| 713 | ||