Login redirige cualquier cosa con redirect

diff --git a/sistema/www/login.php b/sistema/www/login.php
index ca3c860d6e54975c332bfdfb09c1e548d6a2970c..f78827cdd4250e62e0fd0955338ad98625ba59e1 100644 (file)
--- a/sistema/www/login.php
+++ b/sistema/www/login.php
@@ -78,22 +78,15 @@
   if(isset($_SESSION['usuario']) &&
        (isset($_POST['redirect']) || isset($_GET['redirect'])))
   {
-    if((isset($_GET['redirect']) && $_GET['redirect'] == 'sistemas') ||
-       (isset($_POST['redirect']) && $_POST['redirect'] == 'sistemas'))
-    {
-      header('location: sistemas.php');
-      exit;
-    }
+    @ $redirect = $_GET['redirect'].$_POST['redirect'];
+    $db = DB::Connect('mysql://intranet:intranet@bal747f/intranet');
+    $query = "SELECT link
+              FROM servicio
+              WHERE servicio = $redirect";
+    $link = $db->getOne($query);
+    if(PEAR::isError($link))
+      header('location: '.$redirect);
     else
-    {
-      $db = DB::Connect('mysql://intranet:intranet@bal747f/intranet');
-      $query = "SELECT link
-                FROM servicio
-               WHERE servicio = ";
-      if(isset($_POST['redirect'])) $query .= $_POST['redirect'];
-      else                          $query .= $_GET['redirect'];
-      $link = $db->getOne($query);
       header('location: '.$link);
-    }
   } 
 ?>