greggy/landingpage-haus-schleusingen
1
0
Fork 0
Code Issues 2 Pull Requests Actions Packages Projects Releases Wiki Activity

Fix #43: Offene Redirects via REQUEST_URI fixen #51

Merged
greggy merged 1 commits from feature/issue-43-open-redirect-fix into main 2026-05-22 08:32:24 +02:00
Conversation 0 Commits 1 Files Changed 1 +3 -3
1 changed files with 3 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
app/controllers/HomeController.php
View File

@@ -51,7 +51,7 @@ class HomeController extends Controller
$honeypot = $normalizeContactValue((string) ($_POST['website'] ?? '')); $honeypot = $normalizeContactValue((string) ($_POST['website'] ?? ''));
if ($honeypot !== '') { if ($honeypot !== '') {
header('Location: ' . $_SERVER['REQUEST_URI'] . '#form-result'); header('Location: /#form-result');
$_SESSION['form_success'] = true; $_SESSION['form_success'] = true;
exit; exit;
} else { } else {
@@ -102,7 +102,7 @@ class HomeController extends Controller
if ($mailSent) { if ($mailSent) {
$_SESSION['last_contact_submit'] = time(); $_SESSION['last_contact_submit'] = time();
header('Location: ' . $_SERVER['REQUEST_URI'] . '#form-result'); header('Location: /#form-result');
$_SESSION['form_success'] = true; $_SESSION['form_success'] = true;
exit; exit;
} else { } else {
@@ -111,7 +111,7 @@ class HomeController extends Controller
} }
} }
if (!empty($formErrors)) { if (!empty($formErrors)) {
header('Location: ' . $_SERVER['REQUEST_URI'] . '#form-result'); header('Location: /#form-result');
$_SESSION['form_errors'] = $formErrors; $_SESSION['form_errors'] = $formErrors;
$_SESSION['form_data'] = $formData; $_SESSION['form_data'] = $formData;
exit; exit;