mirror of
https://github.com/lkddi/nexusphp.git
synced 2026-04-14 12:30:49 +08:00
Fix some potential security hazards
This commit is contained in:
@@ -8,7 +8,7 @@ if (!user_can('userprofile'))
|
||||
permissiondenied();
|
||||
else
|
||||
{
|
||||
$ip = trim($_GET['ip']);
|
||||
$ip = htmlspecialchars(trim($_GET['ip']));
|
||||
if ($ip)
|
||||
{
|
||||
$regex = "/^(((1?\d{1,2})|(2[0-4]\d)|(25[0-5]))(\.\b|$)){4}$/";
|
||||
|
||||
Reference in New Issue
Block a user