Strips userid and password parameters off URL parameters list.

This commit is contained in:
tonnesen 2002-10-25 21:52:31 +00:00
parent 769d945579
commit 32e55e62d9
1 changed files with 8 additions and 1 deletions

View File

@ -180,6 +180,7 @@ sub checkauth {
my @inputs;
my $self_url = $query->self_url();
foreach my $name (param $query) {
(next) if ($name eq 'userid' || $name eq 'password');
my $value = $query->param($name);
push @inputs, {name => $name , value => $value};
}
@ -190,7 +191,13 @@ sub checkauth {
-expires => '+1y');
$template->param(loginprompt => 1);
$template->param(url => $query->self_url());
# Strip userid and password parameters off the self_url variable
$self_url=~s/\?*userid=[^;]*;*//g;
$self_url=~s/\?*password=[^;]*;*//g;
$template->param(url => $self_url);
print $query->header(-cookie=>$cookie), $template->output;
exit;
}