FORGOT PASS - redirect problem when re-logging in.

[Guest pauly_43]

Hello all,

here is the bug. i am running cc. v3.0.10. i am testing the "forgot password" function. when selected, it sends the email just fine with a new temp. pass. when i click on the link in the email it takes me to this location:

http://centraldelhogar.com/index.php?act=login

and when i enter the new temp. pass. it then goes to this page and hangs

http://centraldelhogar.com/index.php?act=login&redir=

it just hangs there. i have looked at the login.inc.php file at this piece of code:

----------------------------------------

// redirect

//"login","reg","unsubscribe","forgotPass"

if( isset($_GET['redir']) && !eregi("logout|login|forgotPass|changePass",base64_decode($_GET['redir']))){

$_GET['redir'] = treatGet($_GET['redir']);

header("Location: ".str_replace("&","&",base64_decode(treatGet($_GET['redir']))));

exit;

} else {

header("Location: ".$GLOBALS['rootRel']."index.php");

exit;

}

------------------------------------------

i am not an expert with php but from what i can tell it seems to be right. when i add the extra "index.php" on to the end of the hanging url it goes

ex:

http://centraldelhogar.com/index.php?act=login&redir=

+

index.php

then it goes and logs me in.

Please, any ideas on this? i hope it is just an easy fix. any and all suggestions appreciated.

cheers!!!

paul

[convict]

You have got the point! You are absolutely right this is a bug.

The code you have mentioned:

if( isset($_GET['redir']) && !eregi("logout|login|forgotPass|changePass",base64_decode($_GET['redir']))){

Have to be:

if(isset($_GET['redir']) && !empty($_GET['redir']) && !eregi("logout|login|forgotPass|changePass",base64_decode($_GET['redir']))){

PM has been sent to Al.

[Al Brookbanks]

Hi folks. I've added a bug report here to investigate this:

http://bugs.cubecart.com/?do=details&id=512

[Al Brookbanks]

Thanks for this one folks. I've fixed it in 3.0.11 and 3.1.0 (dev site).