From 29a48de5e29841f46791d42d6e329898688914fe Mon Sep 17 00:00:00 2001
From: Friendika <info@friendika.com>
Date: Tue, 19 Apr 2011 16:31:39 -0700
Subject: [PATCH] follow requests most adhere to site allow policy

---
 boot.php       | 2 +-
 mod/follow.php | 7 +++++++
 2 files changed, 8 insertions(+), 1 deletion(-)

diff --git a/boot.php b/boot.php
index 763dfc3fe8..1dd5394341 100644
--- a/boot.php
+++ b/boot.php
@@ -2,7 +2,7 @@
 
 set_time_limit(0);
 
-define ( 'FRIENDIKA_VERSION',      '2.1.953' );
+define ( 'FRIENDIKA_VERSION',      '2.1.954' );
 define ( 'DFRN_PROTOCOL_VERSION',  '2.21'    );
 define ( 'DB_UPDATE_VERSION',      1053      );
 
diff --git a/mod/follow.php b/mod/follow.php
index 23fad81a89..a1412e6c4e 100644
--- a/mod/follow.php
+++ b/mod/follow.php
@@ -12,6 +12,13 @@ function follow_post(&$a) {
 
 	$url = $orig_url = notags(trim($_POST['url']));
 
+	if(! allowed_url($url)) {
+		notice( t('Disallowed profile URL.') . EOL);
+		goaway($_SESSION['return_url']);
+		// NOTREACHED
+	}
+
+
 	$ret = probe_url($url);