Do not redirect to protected pages after logout (see #6210)

contao · Sep 23, 2013 · bf3b9b0 · bf3b9b0
1 parent a2355b2
commit bf3b9b0
Show file tree

Hide file tree

Showing 2 changed files with 15 additions and 3 deletions.
diff --git a/system/docs/CHANGELOG.md b/system/docs/CHANGELOG.md
@@ -4,6 +4,9 @@ Contao Open Source CMS Changelog
 Version 3.1.3 (2013-XX-XX)
 --------------------------
 
+### Fixed
+Do not redirect to protected pages after logout (see #6210).
+
 ### Fixed
 Consider the additional arguments in `Frontend::jumpToOrReload()` (see #5734).
 

diff --git a/system/modules/core/modules/ModuleLogout.php b/system/modules/core/modules/ModuleLogout.php
@@ -61,16 +61,25 @@ public function generate()
 		}
 
 		$this->import('FrontendUser', 'User');
+
+		$blnUseJumpTo = ($this->jumpTo > 0);
 		$strRedirect = \Environment::get('base');
 
 		// Redirect to last page visited
 		if ($this->redirectBack && !empty($_SESSION['LAST_PAGE_VISITED']))
 		{
-			$strRedirect = $_SESSION['LAST_PAGE_VISITED'];
+			$objLastPage = \PageModel::findByIdOrAlias($this->getPageIdFromUrl($_SESSION['LAST_PAGE_VISITED']));
+
+			// Check whether the page is protected (see #6210)
+			if ($objLastPage !== null && !$objLastPage->protected)
+			{
+				$blnUseJumpTo = false;
+				$strRedirect = $_SESSION['LAST_PAGE_VISITED'];
+			}
 		}
 
-		// Redirect to jumpTo page
-		elseif ($this->jumpTo && ($objTarget = $this->objModel->getRelated('jumpTo')) !== null)
+		// Redirect to the jumpTo page
+		if ($blnUseJumpTo && ($objTarget = $this->objModel->getRelated('jumpTo')) !== null)
 		{
 			$strRedirect = $this->generateFrontendUrl($objTarget->row());
 		}