This commit is contained in:
Michael Foster 2013-09-15 05:48:37 +10:00
parent 961e3d3fe0
commit 4cd2389655
2 changed files with 2 additions and 2 deletions

View File

@ -94,7 +94,7 @@ function loadConfig() {
if (!isset($config['referer_match'])) if (!isset($config['referer_match']))
if (isset($_SERVER['HTTP_HOST'])) { if (isset($_SERVER['HTTP_HOST'])) {
$config['referer_match'] = '/^' . $config['referer_match'] = '/^' .
(preg_match('@^https?:@//', $config['root']) ? '' : (preg_match('@^https?://@', $config['root']) ? '' :
'https?:\/\/' . $_SERVER['HTTP_HOST']) . 'https?:\/\/' . $_SERVER['HTTP_HOST']) .
preg_quote($config['root'], '/') . preg_quote($config['root'], '/') .
'(' . '(' .

View File

@ -273,7 +273,7 @@ if (isset($_POST['delete'])) {
if ($config['allow_upload_by_url'] && isset($_POST['file_url']) && !empty($_POST['file_url'])) { if ($config['allow_upload_by_url'] && isset($_POST['file_url']) && !empty($_POST['file_url'])) {
$post['file_url'] = $_POST['file_url']; $post['file_url'] = $_POST['file_url'];
if (!preg_match('@^https?:@//', $post['file_url'])) if (!preg_match('@^https?://@', $post['file_url']))
error($config['error']['invalidimg']); error($config['error']['invalidimg']);
if (mb_strpos($post['file_url'], '?') !== false) if (mb_strpos($post['file_url'], '?') !== false)