issues
search
bmcbride
/
PHP-MBTiles-Server
PHP MBTiles Server
90
stars
33
forks
source link
Security updates
#5
Open
asd20752
opened
3 years ago
asd20752
commented
3 years ago
I have added some simple security updates with this pull.
Preventing SQL injection with binding parameters instead of hard coding into SQL string.
Checking if the requested database is a sub file of the working directory to prevent traversing of system folders.
Checking if the database exists before opening with SQL lite to prevent new empty files to be spawned.
Removed DEMO from README.md since they were broken anyways.
I have added some simple security updates with this pull.