lkddi/nexusphp
1
0
Fork 0
mirror of https://github.com/lkddi/nexusphp.git synced 2026-04-14 04:20:49 +08:00
Code Issues Packages Projects Releases Wiki Activity

Merge branch '1.9' into php8

Browse Source
This commit is contained in:
xiaomlove
2025-11-09 15:41:19 +07:00
parent c0eb7b787c ab7c3a71a4
commit 6fb7be9036
1 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
include/globalfunctions.php
View File

@@ -508,7 +508,7 @@ function isHttps(): bool
}
function getSchemeAndHttpHost(bool $fromConfig = false)
function getSchemeAndHttpHost(bool $fromConfig = false): string
{
if (isRunningInConsole() || $fromConfig) {
$host = get_setting("basic.BASEURL");
@@ -1379,12 +1379,15 @@ function filter_src($src)
return $src;
}
$host = parse_url($src, PHP_URL_HOST);
if (!empty($host) && $host != $_SERVER['HTTP_HOST']) {
$currentHost = parse_url(getSchemeAndHttpHost(), PHP_URL_HOST);
if (!empty($host) && $host != $currentHost) {
return $src;
}
$guessScriptFilename = sprintf("%s/%s", $_SERVER['DOCUMENT_ROOT'], trim($path, '/'));
if (!file_exists($guessScriptFilename)) {
return $src;
if (isset($_SERVER['DOCUMENT_ROOT'])) {
$guessScriptFilename = sprintf("%s/%s", $_SERVER['DOCUMENT_ROOT'], trim($path, '/'));
if (!file_exists($guessScriptFilename)) {
return $src;
}
}
//only allow these
$imgExtensions = implode("|", \App\Models\Attachment::IMG_EXTENSIONS);