diff options
Diffstat (limited to 'mod/follow.php')
| -rw-r--r-- | mod/follow.php | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/mod/follow.php b/mod/follow.php index 23fad81a8..a1412e6c4 100644 --- a/mod/follow.php +++ b/mod/follow.php @@ -12,6 +12,13 @@ function follow_post(&$a) { $url = $orig_url = notags(trim($_POST['url'])); + if(! allowed_url($url)) { + notice( t('Disallowed profile URL.') . EOL); + goaway($_SESSION['return_url']); + // NOTREACHED + } + + $ret = probe_url($url); |