libre-frontends-mirrors/4get
0
0
Fork 0
mirror of https://git.lolcat.ca/lolcat/4get.git synced 2025-06-28 11:39:53 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

path traversal exploit (this is what you get for using free software)

Browse source
This commit is contained in:
lolcat 2025-03-02 21:58:18 -05:00
parent 36b0c570aa
commit b2203804c7
1 changed files with 6 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

7
favicon.php
View file

@ -15,7 +15,12 @@ class favicon{
header("Content-Type: image/png");
if(substr_count($url, "/") !== 2){
if(
preg_match(
'/^https?:\/\/[A-Za-z0-9.-]+$/',
$url
) === 0
){
header("X-Error: Only provide the protocol and domain");
$this->defaulticon();