mirror of
https://github.com/hakasenyang/marumaru-php-parser
synced 2026-08-22 02:03:08 +09:00
보안 취약점 수정..
RFI bugfix
This commit is contained in:
@@ -8,6 +8,16 @@
|
||||
if(isset($imgurl))
|
||||
{
|
||||
$a = parse_url($imgurl);
|
||||
// Insecure checkup causes RFI
|
||||
switch($a['scheme'])
|
||||
{
|
||||
case 'http':
|
||||
case 'https':
|
||||
break;
|
||||
default:
|
||||
exit;
|
||||
}
|
||||
|
||||
switch($a['host'])
|
||||
{
|
||||
case 'www.yuncomics.com':
|
||||
@@ -183,4 +193,4 @@ startdata:
|
||||
}
|
||||
else
|
||||
echo $title.PHP_EOL.implode(PHP_EOL, $aab);
|
||||
}
|
||||
}
|
||||
Reference in New Issue
Block a user