harukin/core
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

validate input to import_xchan(), as we don't consistently check it prior to entering this function

Browse Source
This commit is contained in:
friendica 2013-07-18 18:22:08 -07:00
parent c6c0a1caa9
commit 4aff3d4217
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
include/zot.php
View File

@ -445,6 +445,13 @@ function import_xchan($arr) {
$ret = array('success' => false); $ret = array('success' => false);
$changed = false; $changed = false;
if(! (is_array($arr) && array_key_exists('success',$arr) && $arr['success'])) {
logger('import_xchan: invalid data packet: ' . print_r($arr,true));
$ret['message'] = t('Invalid data packet');
return $ret;
}
$xchan_hash = base64url_encode(hash('whirlpool',$arr['guid'] . $arr['guid_sig'], true)); $xchan_hash = base64url_encode(hash('whirlpool',$arr['guid'] . $arr['guid_sig'], true));
$import_photos = false; $import_photos = false;