aboutsummaryrefslogtreecommitdiff
path: root/srcs/phpmyadmin/url.php
diff options
context:
space:
mode:
authorCharles Cabergs <me@cacharle.xyz>2020-07-27 10:05:23 +0200
committerCharles Cabergs <me@cacharle.xyz>2020-07-27 10:05:23 +0200
commit5bf66662a9bdd62c5bccab15e607cd95cfb8fcab (patch)
tree39a1a4629749056191c05dfd899f931701b7acf3 /srcs/phpmyadmin/url.php
parent5afd237bbd22028b85532b8c0b3fcead49a00764 (diff)
downloadft_server-5bf66662a9bdd62c5bccab15e607cd95cfb8fcab.tar.gz
ft_server-5bf66662a9bdd62c5bccab15e607cd95cfb8fcab.tar.bz2
ft_server-5bf66662a9bdd62c5bccab15e607cd95cfb8fcab.zip
Removed wordpress and phpmyadmin, my server doesn't handle it well and it brings shame on my famillyHEADmaster
Diffstat (limited to 'srcs/phpmyadmin/url.php')
-rw-r--r--srcs/phpmyadmin/url.php52
1 files changed, 0 insertions, 52 deletions
diff --git a/srcs/phpmyadmin/url.php b/srcs/phpmyadmin/url.php
deleted file mode 100644
index 4c9e0f0..0000000
--- a/srcs/phpmyadmin/url.php
+++ /dev/null
@@ -1,52 +0,0 @@
-<?php
-/* vim: set expandtab sw=4 ts=4 sts=4: */
-/**
- * URL redirector to avoid leaking Referer with some sensitive information.
- *
- * @package PhpMyAdmin
- */
-declare(strict_types=1);
-
-use PhpMyAdmin\Core;
-use PhpMyAdmin\Response;
-use PhpMyAdmin\Sanitize;
-use PhpMyAdmin\DatabaseInterface;
-
-if (! defined('ROOT_PATH')) {
- define('ROOT_PATH', __DIR__ . DIRECTORY_SEPARATOR);
-}
-
-/**
- * Gets core libraries and defines some variables
- */
-define('PMA_MINIMUM_COMMON', true);
-require_once ROOT_PATH . 'libraries/common.inc.php';
-
-// Load database service because services.yaml is not available here
-$containerBuilder->set(DatabaseInterface::class, DatabaseInterface::load());
-
-// Only output the http headers
-$response = Response::getInstance();
-$response->getHeader()->sendHttpHeaders();
-$response->disable();
-
-if (! Core::isValid($_GET['url'])
- || ! preg_match('/^https:\/\/[^\n\r]*$/', $_GET['url'])
- || ! Core::isAllowedDomain($_GET['url'])
-) {
- Core::sendHeaderLocation('./');
-} else {
- // JavaScript redirection is necessary. Because if header() is used
- // then web browser sometimes does not change the HTTP_REFERER
- // field and so with old URL as Referer, token also goes to
- // external site.
- echo "<script type='text/javascript'>
- window.onload=function(){
- window.location='" , Sanitize::escapeJsString($_GET['url']) , "';
- }
- </script>";
- // Display redirecting msg on screen.
- // Do not display the value of $_GET['url'] to avoid showing injected content
- echo __('Taking you to the target site.');
-}
-die();