thunix
/
wiki
3
1
Fork 5
Code Issues Pull Requests 1 Releases Wiki Activity

Don't output anything only 403 on fishy request

This commit is contained in:
southerntofu 2021-03-20 18:33:58 +01:00
parent 6d6093990d
commit 549e014daa
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
wiki.php
View File

@ -12,10 +12,10 @@ $page = isset($_GET['page']) ? $_GET['page'] : 'main';
// Sanitize page request so we don't allow to read EVERY markdown file
// for example ../../../home/foobar/mysecretdocument
if (strpos($page, "../") !== false) {
$content_file = "includes/nice_try.md";
} else {
$content_file = "articles/$page.md";
header('HTTP/1.0 403 Forbidden');
exit();
}
$content_file = "articles/$page.md";
$Parsedown = new Parsedown();
$Parsedown->setSafeMode(true);