Product Linking to another website potential issue

**PhillipHarrison** · 30 Jan 2013, 05:12 PM

Hello,

Is there a way to stop someone from using the redirect as below?

Code:

http://www.yourshop.co.uk/index.php?main_page=redirect&action=url&goto=www.malicious-website.co.uk

Is it possible to implement a whitelist of domains that the redirect will only work for?

many thanks

**kobra** · 30 Jan 2013, 05:15 PM

That would have to be on the server where yourshop.co.uk resides(DNS)
Lock down the server

**DrByte** · 30 Jan 2013, 07:05 PM

Sure: You can write your own custom code for whitelisting in /includes/modules/pages/redirect/header_php.php for case 'url'.

Thread: Product Linking to another website potential issue