login: only allow relative URLs in return=

1 files changed, 6 insertions, 0 deletions

diff --git a/include/functions.php b/include/functions.php
index 8c0654f3c..7f00f2f04 100755
--- a/include/functions.php
+++ b/include/functions.php
@@ -2562,3 +2562,9 @@
 
 		return $ts;
 	}
+
+	function is_absolute_url($url) {
+		$parts = parse_url($url);
+
+		return $parts['host'] != '';
+	}