opensourcemirror
/
RunPHPCode
mirror of https://github.com/websiteduck/Run-PHP-Code.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Don't allow double dot in proxy url

This commit is contained in:
Brian Adams 2022-08-21 20:06:59 -05:00
parent 010846bfcf
commit f3818a8474
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
proxy.php
View File

@ -6,6 +6,11 @@ if (!isset($_GET['url'])) {
$url = urldecode($_GET['url']);
if (strpos($url, '/..') !== false) {
header('HTTP/1.0 403 Forbidden');
die();
}
if (
strpos($url, 'http://', 0) !== 0 &&
strpos($url, 'https://', 0) !== 0 &&