OpenRediect 취약점 수정

2024-01-25 16:50:47 +09:00
parent cb6b39cb60
commit 15f2037790
2 changed files with 3 additions and 2 deletions
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@ -3612,7 +3612,8 @@ function check_url_host($url, $msg='', $return_url=G5_URL, $is_redirect=false)
    while ( ( $replace_url = preg_replace(array('/\/{2,}/', '/\\@/'), array('//', ''), urldecode($url)) ) != $url ) {
        $url = $replace_url;
    }
-    $p = @parse_url(trim($url));
+
+    $p = @parse_url(trim(str_replace('\\', '', $url)));
    $host = preg_replace('/:[0-9]+$/', '', $_SERVER['HTTP_HOST']);
    $is_host_check = false;