diff --git a/auth_request.php b/auth_request.php index ef56f4376..cfdb3e3ec 100644 --- a/auth_request.php +++ b/auth_request.php @@ -39,7 +39,7 @@ $arrWhitelist = [ '/webGui/images/case-model.png', '/webGui/images/green-on.png' ]; -if (in_array($_SERVER['REQUEST_URI'],$arrWhitelist)) { +if (in_array(preg_replace(['/\?v=\d+/','/\?\d+/'],'',$_SERVER['REQUEST_URI']),$arrWhitelist)) { // authorized http_response_code(200); } else { diff --git a/login.php b/login.php index 4c76e1ad6..3a877b663 100644 --- a/login.php +++ b/login.php @@ -306,7 +306,7 @@ $theme_dark = in_array($display['theme'],['black','gray']); } } - "> + @@ -328,7 +328,7 @@ $theme_dark = in_array($display['theme'],['black','gray']); - + diff --git a/plugins/dynamix/template.php b/plugins/dynamix/template.php index 9193117a3..d80051fd2 100644 --- a/plugins/dynamix/template.php +++ b/plugins/dynamix/template.php @@ -46,7 +46,7 @@ foreach (glob('plugins/*', GLOB_ONLYDIR) as $plugin) { // get variables $name = $_GET['name']; $dir = $_GET['dir']; -$path = substr(explode('?', $_SERVER['REQUEST_URI'])[0], 1); +$path = empty($_GET['path']) ? substr(explode('?', $_SERVER['REQUEST_URI'])[0], 1) : $_GET['path']; // The current "task" is the first element of the path $task = strtok($path, '/');