aboutsummaryrefslogtreecommitdiffstats
path: root/mod/follow.php
diff options
context:
space:
mode:
authorFriendika <info@friendika.com>2011-04-19 16:31:39 -0700
committerFriendika <info@friendika.com>2011-04-19 16:31:39 -0700
commit29a48de5e29841f46791d42d6e329898688914fe (patch)
treea42c9b4a2b985df3d822947b5df402d508c3034f /mod/follow.php
parenta0179235d2d4672ba9dc79b33505555766b3228a (diff)
downloadvolse-hubzilla-29a48de5e29841f46791d42d6e329898688914fe.tar.gz
volse-hubzilla-29a48de5e29841f46791d42d6e329898688914fe.tar.bz2
volse-hubzilla-29a48de5e29841f46791d42d6e329898688914fe.zip
follow requests most adhere to site allow policy
Diffstat (limited to 'mod/follow.php')
-rw-r--r--mod/follow.php7
1 files changed, 7 insertions, 0 deletions
diff --git a/mod/follow.php b/mod/follow.php
index 23fad81a8..a1412e6c4 100644
--- a/mod/follow.php
+++ b/mod/follow.php
@@ -12,6 +12,13 @@ function follow_post(&$a) {
$url = $orig_url = notags(trim($_POST['url']));
+ if(! allowed_url($url)) {
+ notice( t('Disallowed profile URL.') . EOL);
+ goaway($_SESSION['return_url']);
+ // NOTREACHED
+ }
+
+
$ret = probe_url($url);