diff --git a/project.png b/project.png index 01b7589..c653503 100644 Binary files a/project.png and b/project.png differ diff --git a/www/header.php b/www/header.php index 4bf53a5..3b54c59 100644 --- a/www/header.php +++ b/www/header.php @@ -11,6 +11,15 @@ if (($handle = fopen($csvfile, "r")) !== FALSE) { while (($data = fgetcsv($handle, 1000, ",")) !== FALSE) { //PREVENT ALL MALICIOUS PHP PAYLOADS FROM BEING EXECUTED FROM CSV FILES! + $data[0] = htmlspecialchars($data[0]); + $data[1] = htmlspecialchars($data[1]); + $data[2] = htmlspecialchars($data[2]); + $data[3] = htmlspecialchars($data[3]); + $data[4] = htmlspecialchars($data[4]); + $data[5] = htmlspecialchars($data[5]); + $data[6] = htmlspecialchars($data[6]); + $data[7] = htmlspecialchars($data[7]); + $data[0]=preg_replace("/[^a-zA-Z0-9:\/.\ -✔️❌]/", "", $data[0]); $data[1]=preg_replace("/[^a-zA-Z0-9:\/.\ -✔️❌]/", "", $data[1]); $data[2]=preg_replace("/[^a-zA-Z0-9:\/.\ -✔️❌]/", "", $data[2]);