d_s_bisht/devsofttech_hms_ci4
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Ignore stale opd appointment intended URL after login

Browse Source
This commit is contained in:
DevSoftTech Server 2026-04-08 19:57:40 +05:30
parent 2795e6255c
commit 5c5d6694c0
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
app/Config/Auth.php
View File

@ -443,12 +443,16 @@ class Auth extends ShieldAuth
$session = session();
$beforeLoginUrl = (string) ($session->getTempdata('beforeLoginUrl') ?? '');
// Some AJAX workspace URLs can be stored as beforeLoginUrl in production
// Some temporary/internal URLs can be stored as beforeLoginUrl in production
// and then hijack post-login landing. Skip those and use configured default.
if ($beforeLoginUrl !== '') {
$path = (string) parse_url($beforeLoginUrl, PHP_URL_PATH);
$path = '/' . ltrim($path, '/');
if ($path === '/doctor_work/document_workspace') {
$blockedPaths = [
'/doctor_work/document_workspace',
'/opd/appointment',
];
if (in_array(strtolower($path), $blockedPaths, true)) {
$beforeLoginUrl = '';
$session->removeTempdata('beforeLoginUrl');
}