oxeo0/darknet-lantern
1
0
Fork 0
mirror of http://git.nowherejezfoltodf4jiyl6r56jnzintap5vyjlia7fkirfsnfizflqd.onion/nihilist/darknet-lantern.git synced 2025-05-16 20:26:58 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix safety checks via php

Browse source
This commit is contained in:
root 2025-01-30 08:17:04 +01:00
parent b44f103bc6
commit ffd6fcf363
7 changed files with 71 additions and 51 deletions
Download patch file Download diff file Expand all files Collapse all files

9
www/webring.php
View file

@ -13,6 +13,15 @@ if (($handle = fopen($csvfile, "r")) !== FALSE) {
while (($data = fgetcsv($handle, 1000, ",")) !== FALSE) {
$data[0]=preg_replace("/[^a-zA-Z0-9:\/.\ -✔️❌]/", "", $data[0]);
// PREVENT ALL MALICIOUS PHP PAYLOADS FROM BEING EXECUTED FROM CSV FILES!
$data[0] = htmlspecialchars($data[0]);
$data[1] = htmlspecialchars($data[1]);
$data[2] = htmlspecialchars($data[2]);
$data[3] = htmlspecialchars($data[3]);
$data[4] = htmlspecialchars($data[4]);
$data[5] = htmlspecialchars($data[5]);
$data[6] = htmlspecialchars($data[6]);
$data[7] = htmlspecialchars($data[7]);
$data[1]=preg_replace("/[^a-zA-Z0-9:\/.\ -✔️❌]/", "", $data[1]);
$data[2]=preg_replace("/[^a-zA-Z0-9:\/.\ -✔️❌]/", "", $data[2]);
$data[3]=preg_replace("/[^a-zA-Z0-9:\/.\ -✔️❌]/", "", $data[3]);