Don't allow header injection.
This commit is contained in:
parent
34dd265f6a
commit
6f11e0526e
@ -15,7 +15,7 @@ function cachePath($path) {
|
|||||||
return $path;
|
return $path;
|
||||||
}
|
}
|
||||||
|
|
||||||
$url = $_SERVER["SCRIPT_URL"];
|
$url = str_replace("\b", "", str_replace("\r", "", str_replace("\n", "", $_SERVER["SCRIPT_URL"])));
|
||||||
if ($url[strlen($url) - 1] == '/')
|
if ($url[strlen($url) - 1] == '/')
|
||||||
$url = substr($url, 0, strlen($url) - 1);
|
$url = substr($url, 0, strlen($url) - 1);
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user