HOR-885

workflow/engine/methods/login/sysLoginVerify.php

@@ -1,4 +1,5 @@
 <?php
+
 /**
  * sysLoginVerify.php
  *  
@@ -24,10 +25,13 @@
  */
 
 if (array_key_exists("d", $_GET)) {
-    $_POST = unserialize(base64_decode($_GET["d"]));
+    $str = base64_decode($_GET["d"]);
+    if (preg_match('/^a:[0-9]+:{/', $str) && !preg_match('/(^|;|{|})O:\+?[0-9]+:"/', $str)) {
+        $_POST = unserialize($str);
+    }
 }
 
-if (! isset ($_POST)) {
+if (!isset($_POST)) {
     G::header('location: /sys/' . $lang . '/' . SYS_SKIN . '/' . 'login/login');
 }
 if (isset($_SESSION['sysLogin'])) {