Ticket #2092: allow_different_port_in_login.patch

gui/include/login.php

@@ -212 +212 @@
                }
        }
 
-       // prevent external login / check for referer
-       if ($preventExternalLogin) {
-               if (isset($_SERVER['HTTP_REFERER']) && !empty($_SERVER['HTTP_REFERER'])) {
+        // prevent external login / check for referer
+        if ($preventExternalLogin) {
+                if (isset($_SERVER['HTTP_REFERER']) && !empty($_SERVER['HTTP_REFERER'])) {
 
-                       $info = parse_url($_SERVER['HTTP_REFERER']);
-                       if (isset($info['host']) && !empty($info['host'])) {
-                               if ($info['host'] != $_SERVER['HTTP_HOST']
-                                       || $info['host'] != $_SERVER['SERVER_NAME']) {
-                                       set_page_message(tr('Request from foreign host was blocked!'));
-                                       if (!(substr($_SERVER['SCRIPT_FILENAME'], (int)-strlen($_SERVER['REDIRECT_URL']), strlen($_SERVER['REDIRECT_URL'])) === $_SERVER['REDIRECT_URL'])) {
-                                               redirect_to_level_page();
-                                       }
-                               }
-                       }
-               }
-       }
+                        $info = parse_url($_SERVER['HTTP_REFERER']);
+                        if (isset($info['host']) && !empty($info['host'])) {
+                                if ($info['host'].':'.$_SERVER['SERVER_PORT'] != $_SERVER['HTTP_HOST']
+                                        || $info['host'].':'.$_SERVER['SERVER_PORT'] != $_SERVER['SERVER_NAME'].':'.$_SERVER['SERVER_PORT']) {
+                                        set_page_message(tr('Request from foreign host was blocked!'));
+                                        if (!(substr($_SERVER['SCRIPT_FILENAME'], (int)-strlen($_SERVER['REDIRECT_URL']), strlen($_SERVER['REDIRECT_URL'])) === $_SERVER['REDIRECT_URL'])) {
+                                                redirect_to_level_page();
+                                        }
+                                }
+                        }
+                }
+        }
 }