diff --git a/url.php b/url.php index 0e721cd817..764b81cb73 100644 --- a/url.php +++ b/url.php @@ -17,19 +17,17 @@ if (! PMA_isValid($_GET['url']) ) { header('Location: ' . $cfg['PmaAbsoluteUri']); } else { - // header('Location: ' . $_GET['url']); - // domain whitelist check if (PMA_isAllowedDomain($_GET['url'])) { // JavaScript redirection is necessary. Because if header() is used - // then web browser sometimes does not change the HTTP_REFERER - // field and so with old URL as Referer, token also goes to + // then web browser sometimes does not change the HTTP_REFERER + // field and so with old URL as Referer, token also goes to // external site. echo ""; + window.onload=function(){ + window.location='" . $_GET['url'] . "'; + } + "; // Display redirecting msg on screen. echo __('Taking you to ') . ($_GET['url']); } else {