diff --git a/webroot/api/dashboard/discordCallback.php b/webroot/api/dashboard/discordCallback.php index f12a3cf..9700599 100644 --- a/webroot/api/dashboard/discordCallback.php +++ b/webroot/api/dashboard/discordCallback.php @@ -91,7 +91,7 @@ if (isset($_GET['code']) && !empty($_GET['code']) && isset($_COOKIE['session']) $stmt->bind_param("sssssss", $userData['id'], $data['access_token'], $data['refresh_token'], $data['expires_in'], $avatar, $userData['email'], $sqlData['email']); $stmt->execute(); - if (isset($_COOKIE['redirect_link']) && !empty($_COOKIE['redirect_link']) && strpos($_COOKIE['redirect_link'], 'https://upload.xytriza.com/dashboard') === 0) { + if (isset($_COOKIE['redirect_link']) && !empty($_COOKIE['redirect_link']) && strpos($_COOKIE['redirect_link'], '/dashboard') === 0) { setcookie('redirect_link', '', time() - 3600, '/', '', true, true); // deepcode ignore OR: already validated in the if condition header('Location: ' . $_COOKIE['redirect_link']); diff --git a/webroot/api/dashboard/generateConfig.php b/webroot/api/dashboard/generateConfig.php index f06dab6..ab8e511 100644 --- a/webroot/api/dashboard/generateConfig.php +++ b/webroot/api/dashboard/generateConfig.php @@ -39,7 +39,7 @@ $config = '{ "Name": "Xytriza\'s Uploading Service", "DestinationType": "ImageUploader, FileUploader", "RequestType": "POST", - "RequestURL": "https://upload.xytriza.com/api/uploadFile.php", + "RequestURL": "/api/uploadFile.php", "FileFormName": "file", "Body": "MultipartFormData", "Headers": { diff --git a/webroot/api/fetchFile.php b/webroot/api/fetchFile.php index 838b0cb..b03133e 100644 --- a/webroot/api/fetchFile.php +++ b/webroot/api/fetchFile.php @@ -44,13 +44,13 @@ if (!$stmt->fetch()) { Xytriza's Uploading Service - File not found - + - + - + fetch()) { $role = $stmt->get_result()->fetch_assoc()["role"]; ?>