bitPickups/friendica_2020-09-1_sharedHosting
1
0
Fork 0
Code Pull requests Activity

proxy_url: Fix extension extraction for URLs containing a . after a ?

Browse source
This commit is contained in:
Hypolite Petovan 2016-12-19 20:19:26 -05:00 committed by Roland Häder
parent 3befdc6920
commit c0ec9c5907
1 changed files with 8 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

14
mod/proxy.php
View file

@ -281,14 +281,14 @@ function proxy_url($url, $writemode = false, $size = '') {
$longpath .= '/' . strtr(base64_encode($url), '+/', '-_'); $longpath .= '/' . strtr(base64_encode($url), '+/', '-_');
// Checking for valid extensions. Only add them if they are safe // Extract the URL extension, disregarding GET parameters starting with ?
$pos = strrpos($url, '.'); $question_mark_pos = strpos($url, '?');
if ($pos) { if ($question_mark_pos === false) {
$extension = strtolower(substr($url, $pos + 1)); $question_mark_pos = strlen($url);
$pos = strpos($extension, '?');
if ($pos) {
$extension = substr($extension, 0, $pos);
} }
$dot_pos = strrpos($url, '.', $question_mark_pos - strlen($url));
if ($dot_pos !== false) {
$extension = strtolower(substr($url, $dot_pos + 1, $question_mark_pos - ($dot_pos + 1)));
} }
$extensions = array('jpg', 'jpeg', 'gif', 'png'); $extensions = array('jpg', 'jpeg', 'gif', 'png');