Hakase/marumaru-php-parser
1
0 Fork 0
mirror of https://github.com/hakasenyang/marumaru-php-parser synced 2026-08-22 10:13:08 +09:00
Code Issues Releases Activity

보안 취약점 수정..

Browse Source 
RFI bugfix
This commit is contained in:
Harold Kim
2017-12-09 13:50:33 +00:00
committed by GitHub
parent 743510268a
commit 7fd6eabbde
1 changed files with 11 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
index.php
+10
View File
@@ -8,6 +8,16 @@
if(isset($imgurl)) if(isset($imgurl))
{ {
$a = parse_url($imgurl); $a = parse_url($imgurl);
// Insecure checkup causes RFI
switch($a['scheme'])
{
case 'http':
case 'https':
break;
default:
exit;
}
switch($a['host']) switch($a['host'])
{ {
case 'www.yuncomics.com': case 'www.yuncomics.com':