Update get_image_data.php

andrzuk / FineCMS

PHP application using my own MVC architecture and PDO database interface.

http://my-notes.pl

15 stars 5 forks source link

Update get_image_data.php #11

Open passtion opened 7 years ago

passtion commented 7 years ago

Fix ssrf by sun@yuesec.com Description: 1、Filter the file suffix：'jpg', 'jpeg', 'gif', 'png', 'swf', 'bmp' 2、Modify the controllable variable: $_SERVER['HTTP_HOST'] --> /config/config.php DOMAIN_NAME