FSN#53553 shorturl HMAC ondertekening nu goed

svn path=/Website/branches/v2018.1/; revision=38884

APPL/API/shorturl.asp

@@ -137,7 +137,8 @@ __Log("== Entering shorturl.asp ==");
                 + "       fac_bookmark_unauth_url,"
                 + "       fac_bookmark_expire,"
                 + "       fac_bookmark_refreshtime,"
-                + "       fac_bookmark_naam"
+                + "       fac_bookmark_naam,"
+                + "       fac_bookmark_flags"
                 + "  FROM fac_bookmark"
                 + " WHERE fac_bookmark_id = " + safe.quoted_sql(u);
         var oRs = Oracle.Execute(sql);
@@ -195,10 +196,14 @@ __Log("== Entering shorturl.asp ==");
             if (rest)
                 params = rest;
         }
-        oRs.Close();
 
         if (params)
             url = url + "?" + params;
+
+        if (oRs("fac_bookmark_flags").Value == 0)
+            var url = protectQS.create(url); // prs/pchange_reset.asp, PRS\prs_perslid_qr_confirm.asp en PRS\self_register_confirm.asp verwachten dit
+
+        oRs.Close();
     }
 
     // Als de bookmark een refreshrate heeft ingesteld wordt automatisch gerefreshed
@@ -211,7 +216,9 @@ __Log("== Entering shorturl.asp ==");
         theURL = "appl/shared/refresher.asp?url=" + Server.URLencode("/?norefresh=1" + transitQS()) + "&refreshrate=" + refresher;
     }
     else
-        var theURL = protectQS.create(url);
+    {
+        var theURL = url;
+    }
 
     if (locked_bdradr_key < 0 && isKnownBookmark && !isMobile && getQParamInt("internal", 0) == 0)
     {