0007055: invalid redirect url returned from string_sanitize_url - MantisBT

ID	Project	Category	View Status	Date Submitted	Last Update

0007055	mantisbt	bugtracker	public	2006-05-08 14:16	2006-09-12 00:54

Reporter	jugg	Assigned To	vboctor
Priority	normal	Severity	major	Reproducibility	always
Status	closed	Resolution	duplicate
Product Version	1.0.3

Summary	0007055: invalid redirect url returned from string_sanitize_url
Description	When viewing an issue in the bugtracker, then clicking the login link, and logging on, you will be redirected to an invalid url. Example: viewing: http://domain/view.php?id=100 login: http://domain/login_page.php?return=%2Fview.php%3Fid%3D16 invalid (missing '?'): http://domain/view.phpid=100
Additional Information	The change between 1.0.2 and 1.0.3 which caused this problem is: ./core/string_api.php line 193 v1.0.2 if ( strpos( '?', $t_url ) !== FALSE ) { v1.0.3 if ( strpos( $t_url, '?' ) !== FALSE ) { swapping it back to v1.0.2 method allows it to work. However, I think the root of the problem is elsewhere, as the v1.0.3 usage is the correct documented use of strpos.
Tags	No tags attached.

duplicate of	0007051	closed	thraxisp	Fix for 0006869 / 0007034 removes quoted "?" from arguments
has duplicate	0007073	closed	ryandesign	Display of Link in notification-mail fails after Login with User-ID and password
has duplicate	0007078	closed	ryandesign	It's not possible to delete a notice in v 1.03
related to	0007282	closed	ryandesign	invalid redirect url returned from string_sanitize_url when incuding # anchor