From 8f40f158904c7438bb52039baf8907b1667d3995 Mon Sep 17 00:00:00 2001
From: wangyidong <wangyidong@cnezsoft.com>
Date: Mon, 5 Aug 2024 16:03:16 +0800
Subject: [PATCH]  *[refac bug #53548] Check referer url.

---
 framework/base/control.class.php | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/framework/base/control.class.php b/framework/base/control.class.php
index e9be0aed43..c4c38caae2 100644
--- a/framework/base/control.class.php
+++ b/framework/base/control.class.php
@@ -1124,6 +1124,7 @@ class baseControl
         {
             if(!empty($data['message'])) echo js::alert($data['message']);
             $locate = $data['locate'] ?? $_SERVER['HTTP_REFERER'] ?? '';
+            if($locate && preg_match('/\(/', $locate)) $locate = $this->config->webRoot;
             if(!empty($locate)) return helper::end(js::locate($locate));
             return helper::end($data['message'] ?? 'success');
         }
@@ -1136,6 +1137,7 @@ class baseControl
                 {
                     echo js::alert($data['message']);
                     $locate = $data['locate'] ?? $_SERVER['HTTP_REFERER'] ?? '';
+                    if($locate && preg_match('/\(/', $locate)) $locate = $this->config->webRoot;
                     if (!empty($locate)) return helper::end(js::locate($locate));
                     return helper::end($data['message'] ?? 'fail');
                 }