From 3abcfefe00e15ccd73d0b0522b0c48c8724640b5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Alexander=20Nicolaysen=20S=C3=B8rnes?=
 <alex@thehandofagony.com>
Date: Sun, 17 Jun 2007 16:59:42 +0000
Subject: [PATCH] Encode the sReturnTo argument to the login page, otherwise we
 may have problems with some urls

---
 account.php      | 2 +-
 include/util.php | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/account.php b/account.php
index aa23a3d..8a563d5 100644
--- a/account.php
+++ b/account.php
@@ -209,7 +209,7 @@ function cmd_do_login()
 
     if($iResult == SUCCESS)
     {
-        $sReturnUrl = $aClean['sReturnTo'];
+        $sReturnUrl = urldecode($aClean['sReturnTo']);
         if(!$sReturnUrl)
             $sReturnUrl = apidb_fullurl("index.php");
         addmsg("You are successfully logged in as '$oUser->sRealname'.", "green");
diff --git a/include/util.php b/include/util.php
index a81e581..3462e78 100644
--- a/include/util.php
+++ b/include/util.php
@@ -907,7 +907,7 @@ function util_trim_description($sDescription)
    to the current page once he has logged in */
 function login_url()
 {
-    $sCurrentUrl = $_SERVER['REQUEST_URI'];
+    $sCurrentUrl = urlencode($_SERVER['REQUEST_URI']);
     $sLoginUrl = BASE."account.php?sCmd=login";
 
     /* If we are on the login page that means the URL already contains an sReturnTo value,