Changeset 19947 for branches/version-2_5-dev/data/class/pages/cart/LC_Page_Cart.php

Timestamp:

2011/01/17 18:32:35 (13 years ago)

Author:

spiritofof

Message:

#790(カートの「戻る」ボタンが機能していない)対応。prev_urlが利用できないため専用セッション変数を用いる。

• REFERER妥当性チェック追加。

File:

• branches/version-2_5-dev/data/class/pages/cart/LC_Page_Cart.php (modified) (2 diffs)

branches/version-2_5-dev/data/class/pages/cart/LC_Page_Cart.php

@@ -196 +196 @@
             } else {
                 if (preg_match("/entry/", $_SERVER['HTTP_REFERER'])) {
-                    $_SESSION['cart_prev_url'] = URL_PATH . 'entry/kiyaku.php';
+                    $_SESSION['cart_prev_url'] = HTTPS_URL . 'entry/kiyaku.php';
                 } else {
                     $_SESSION['cart_prev_url'] = $_SERVER['HTTP_REFERER'];
@@ -202 +202 @@
             }
         }
-        $this->tpl_prev_url = $_SESSION['cart_prev_url'];
+        // 妥当性チェック
+        if (!SC_Utils_Ex::sfIsInternalDomain($_SESSION['cart_prev_url'])) {
+            $_SESSION['cart_prev_url'] = '';
+        }
+
+        $this->tpl_prev_url = (isset($_SESSION['cart_prev_url'])) ? $_SESSION['cart_prev_url'] : '';
     }