fix:obey session cookie even if http_referer is present

edu-sharing · Jul 21, 2023 · 2d7dfd1 · 2d7dfd1
1 parent f18c361
commit 2d7dfd1
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/src/main/php/modules/redirect.php b/src/main/php/modules/redirect.php
@@ -108,6 +108,8 @@ function addContentHeaders($src_file){
 // start session to read object-data
 if (!empty($_GET[$ESRENDER_SESSION_NAME])) {
     $l_sid = $_GET[$ESRENDER_SESSION_NAME];
+} else if(!empty($_COOKIE[$ESRENDER_SESSION_NAME])) {
+    $l_sid = $_COOKIE[$ESRENDER_SESSION_NAME];
 } else if(!empty($_SERVER['HTTP_REFERER'])) {
     $parts = parse_url($_SERVER['HTTP_REFERER']);
     parse_str($parts['query'], $query);