LEAF_3975_FY23_part2_update

department-of-veterans-affairs · Nov 8, 2023 · a9c0604 · a9c0604
1 parent d00e22e
commit a9c0604
Showing 1 changed file with 6 additions and 4 deletions.
diff --git a/LEAF_Nexus/auth_cookie/index.php b/LEAF_Nexus/auth_cookie/index.php
@@ -20,6 +20,8 @@
 {
     $redirect = '';
 
+    $redirect = $protocol . HTTP_HOST . dirname($_SERVER['PHP_SELF']) . '/../';
+
     if (isset($_GET['r'])) {
         $encodedRedirect = $_GET['r'];
         $decodedRedirect = base64_decode($encodedRedirect);
@@ -28,12 +30,12 @@
             $parsedRedirect = parse_url($decodedRedirect);
 
             if ($parsedRedirect !== false) {
-                $redirect = $protocol . HTTP_HOST . $parsedRedirect['path'];
+                $query = isset($parsedRedirect['query']) ? '?' . $parsedRedirect['query'] : '';
+                $fragment = isset($parsedRedirect['fragment']) ? '#' . $parsedRedirect['fragment'] : '';
+                $redirect = $protocol . HTTP_HOST . $parsedRedirect['path'] . $query . $fragment;
             }
         }
-    } else {
-        $redirect = $protocol . HTTP_HOST . dirname($_SERVER['PHP_SELF']) . '/../';
-    }    
+    }      
 
     $user = decryptUser($_COOKIE['REMOTE_USER']);