getHeader()->sendHttpHeaders(); $response->disable(); if (! PMA_isValid($_GET['url']) || ! preg_match('/^https?:\/\/[^\n\r]*$/', $_GET['url']) || ! PMA_isAllowedDomain($_GET['url']) ) { header('Location: ' . $cfg['PmaAbsoluteUri']); } else { // JavaScript redirection is necessary. Because if header() is used // then web browser sometimes does not change the HTTP_REFERER // field and so with old URL as Referer, token also goes to // external site. echo ""; // Display redirecting msg on screen. printf(__('Taking you to %s.'), htmlspecialchars($_GET['url'])); } die(); ?>