[or-cvs] r14882: (ticket:96) Patching WHOIS security vulnerability (torstatus/trunk/web)

kasimir at seul.org kasimir at seul.org
Sun Jun 1 14:20:07 UTC 2008


Author: kasimir
Date: 2008-06-01 10:20:07 -0400 (Sun, 01 Jun 2008)
New Revision: 14882

Modified:
   torstatus/trunk/web/whois.php
Log:
(ticket:96) Patching WHOIS security vulnerability

Modified: torstatus/trunk/web/whois.php
===================================================================
--- torstatus/trunk/web/whois.php	2008-06-01 01:53:40 UTC (rev 14881)
+++ torstatus/trunk/web/whois.php	2008-06-01 14:20:07 UTC (rev 14882)
@@ -9,6 +9,12 @@
 // Include configuration settings
 include("config.php");
 
+// Ensure that the WHOIS service is available, otherwise die
+if (!defined("WHOISPath"))
+{
+	exit;
+}
+
 $ip = $_GET['ip'];
 if (!preg_match("/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/",$ip))
 {



More information about the tor-commits mailing list