Merge pull request #4 from stypr/patch-1

보안 취약점 수정..
This commit is contained in:
Hakase
2017-12-09 23:11:50 +09:00
committed by GitHub
+11 -1
View File
@@ -8,6 +8,16 @@
if(isset($imgurl))
{
$a = parse_url($imgurl);
// Insecure checkup causes RFI
switch($a['scheme'])
{
case 'http':
case 'https':
break;
default:
exit;
}
switch($a['host'])
{
case 'www.yuncomics.com':
@@ -183,4 +193,4 @@ startdata:
}
else
echo $title.PHP_EOL.implode(PHP_EOL, $aab);
}
}