보안 취약점 수정..

RFI bugfix
This commit is contained in:
Harold Kim
2017-12-09 13:50:33 +00:00
committed by GitHub
parent 743510268a
commit 7fd6eabbde
+11 -1
View File
@@ -8,6 +8,16 @@
if(isset($imgurl)) if(isset($imgurl))
{ {
$a = parse_url($imgurl); $a = parse_url($imgurl);
// Insecure checkup causes RFI
switch($a['scheme'])
{
case 'http':
case 'https':
break;
default:
exit;
}
switch($a['host']) switch($a['host'])
{ {
case 'www.yuncomics.com': case 'www.yuncomics.com':
@@ -183,4 +193,4 @@ startdata:
} }
else else
echo $title.PHP_EOL.implode(PHP_EOL, $aab); echo $title.PHP_EOL.implode(PHP_EOL, $aab);
} }