diff --git a/main.inc.php b/main.inc.php index d8af22b8b44cb93e7a5c65fc6d7c90c780dfd721..233a13c3318966c96c1eb36d1e7b25a9c2e5d571 100644 --- a/main.inc.php +++ b/main.inc.php @@ -140,7 +140,6 @@ #CURRENT EXECUTING SCRIPT. define('THISPAGE', Misc::currentURL()); - define('THISURI', $_SERVER['REQUEST_URI']); # This is to support old installations. with no secret salt. if(!defined('SECRET_SALT')) define('SECRET_SALT',md5(TABLE_PREFIX.ADMIN_EMAIL)); diff --git a/scp/staff.inc.php b/scp/staff.inc.php index 0c835d46a780a5acf439af2268da039a73335905..359663a4c6fccd04dc466126c759d71a89acb5a4 100644 --- a/scp/staff.inc.php +++ b/scp/staff.inc.php @@ -49,7 +49,8 @@ require_once(INCLUDE_DIR.'class.csrf.php'); if(!function_exists('staffLoginPage')) { //Ajax interface can pre-declare the function to trap expired sessions. function staffLoginPage($msg) { global $ost, $cfg; - $_SESSION['_staff']['auth']['dest']=THISURI; + $_SESSION['_staff']['auth']['dest'] = + '/' . ltrim($_SERVER['REQUEST_URI'], '/'); $_SESSION['_staff']['auth']['msg']=$msg; require(SCP_DIR.'login.php'); exit;