search

oseawey / timthumb

Automatically exported from code.google.com/p/timthumb
0 stars 0 forks source link

allow all type of sites #111

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. how to use timthumb allow all sites without editing $allowedSites = array (
    'yoursite.com',
);.

Original issue reported on code.google.com by gawka...@gmail.com on 4 Sep 2010 at 7:20

GoogleCodeExporter commented 9 years ago 
feel suck by adding sites.

Original comment by gawka...@gmail.com on 4 Sep 2010 at 7:21

GoogleCodeExporter commented 9 years ago 
the limitation is there as a security issue. It's there to protect you from 
malicious users. Feel free to change the script but I'm not going to change 
anything until I can work out a bullet proof, risk free, solution.

Original comment by BinaryMoon on 5 Sep 2010 at 8:16

GoogleCodeExporter commented 9 years ago 
Very simple fix;

Find
        $isAllowedSite = false;
        foreach ($allowedSites as $site) {
Replace
        $isAllowedSite = true;
        foreach ($allowedSites as $site) {

Original comment by carmelos...@gmail.com on 24 Nov 2010 at 2:26

GoogleCodeExporter commented 9 years ago 
Hey Gawkaweb, got your email. Figured we should leave the convo here, in case 
others find it useful. 

What error are you getting? This applies to version 1.16, and works fine for my 
client. Thumbs are created regardless of host. This isn't ideal functionality 
as it does create security issues, but the web is both give and take.

Original comment by carmelos...@gmail.com on 25 Nov 2010 at 3:25