From: Florent Bruneau <florent.bruneau@polytechnique.org>
Date: Sun, 25 May 2008 22:18:09 +0000 (+0200)
Subject: Oops.
X-Git-Url: http://git.polytechnique.org/?p=dotclear.git;a=commitdiff_plain;h=03bc7383fee71f1400a74338af38d81a32d140f8

Oops.

Signed-off-by: Florent Bruneau <florent.bruneau@polytechnique.org>
---

diff --git a/class.xorg.auth.php b/class.xorg.auth.php
index 0b00ae4..6fea694 100644
--- a/class.xorg.auth.php
+++ b/class.xorg.auth.php
@@ -49,7 +49,7 @@ class xorgAuth extends dcAuth {
     $url .= "?session=" . session_id();
     $url .= "&challenge=" . $_SESSION["auth-x-challenge"];
     $url .= "&pass=" . md5($_SESSION["auth-x-challenge"] . XORG_AUTH_KEY);
-    $url .= "&url=http://murphy.m4x.org/~x2003bruneau/dotclear/auth/XorgReturn" . urlencode("?path=" . $_GET['path']);
+    $url .= "&url=http://murphy.m4x.org/~x2003bruneau/dotclear/auth/XorgReturn" . urlencode("?path=" . $path);
     session_write_close();
     header("Location: $url");
     exit;