edit: paste limited html, enforce filter on all events

[minimedit.git] / page.php

diff --git a/page.php b/page.php
index 5efccbcd06b92d9cad6a80fad6ab996b10d7d7f3..6623c8b39c2281de2038d4dc6ae7e43df58992db 100644 (file)
--- a/page.php
+++ b/page.php
@@ -62,12 +62,12 @@ while (TRUE) {
        if (file_exists("$Page/.private")) {
                # access restriction
                if (!isset($User)) {
-                       http_response_code(403);
-                       include_once 'page.inc.php';
-                       ob_start();
-                       @require_once './403.html';
+                       http_response_code(303);
+                       $target = urlencode($_SERVER['REQUEST_URI']);
+                       header("Location: /login?goto=$target");
                        exit;
                }
+               $PageAccess = $Page;
        }
 
        if (file_exists("$Page.php")) {