kashire/lainchan
4
0
Fork 0
Code Issues 3 Pull Requests Releases Wiki Activity

safer IP address decryption (KU_RANDOMSEED)

Browse Source
This commit is contained in:
Savetheinternet 2011-06-03 17:36:36 +10:00
parent 399a5ab5d1
commit 6ce8812843
1 changed files with 8 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
kusabax.php
View File

@ -188,7 +188,14 @@
} }
// IP // IP
$query->bindValue(':ip', md5_decrypt($post['ip'], $kusabaxc['randomseed']), PDO::PARAM_STR); $ip = md5_decrypt($post['ip'], $kusabaxc['randomseed']);
if(!preg_match('/^\d+\.\d+\.\d+\.\d+$/', $ip)) {
// Invalid IP address. Wrong KU_RANDOMSEED?
$log[] = 'Invalid IP address returned after decryption. Wrong KU_RANDOMSEED?';
$ip = '0.0.0.0'; // just set it to something valid and continue
}
$query->bindValue(':ip', $ip, PDO::PARAM_STR);
// Time (`timestamp`) // Time (`timestamp`)
$query->bindValue(':time', $post['timestamp'], PDO::PARAM_INT); $query->bindValue(':time', $post['timestamp'], PDO::PARAM_INT);