From ee39004f65d3ffb1d4ccbdb69650df672441182b Mon Sep 17 00:00:00 2001
From: Roly Rudy Gutierrez Pinto <gproly@gmail.com>
Date: Thu, 28 Apr 2016 12:03:26 -0400
Subject: [PATCH] HOR-885

---
 workflow/engine/methods/login/sysLoginVerify.php | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/workflow/engine/methods/login/sysLoginVerify.php b/workflow/engine/methods/login/sysLoginVerify.php
index 9df0207ee..0c8acd5c3 100755
--- a/workflow/engine/methods/login/sysLoginVerify.php
+++ b/workflow/engine/methods/login/sysLoginVerify.php
@@ -1,4 +1,5 @@
 <?php
+
 /**
  * sysLoginVerify.php
  *  
@@ -24,10 +25,13 @@
  */
 
 if (array_key_exists("d", $_GET)) {
-    $_POST = unserialize(base64_decode($_GET["d"]));
+    $str = base64_decode($_GET["d"]);
+    if (preg_match('/^a:[0-9]+:{/', $str) && !preg_match('/(^|;|{|})O:\+?[0-9]+:"/', $str)) {
+        $_POST = unserialize($str);
+    }
 }
 
-if (! isset ($_POST)) {
+if (!isset($_POST)) {
     G::header('location: /sys/' . $lang . '/' . SYS_SKIN . '/' . 'login/login');
 }
 if (isset($_SESSION['sysLogin'])) {