[or-cvs] r14882: (ticket:96) Patching WHOIS security vulnerability (torstatus/trunk/web)
kasimir at seul.org
kasimir at seul.org
Sun Jun 1 14:20:07 UTC 2008
Author: kasimir
Date: 2008-06-01 10:20:07 -0400 (Sun, 01 Jun 2008)
New Revision: 14882
Modified:
torstatus/trunk/web/whois.php
Log:
(ticket:96) Patching WHOIS security vulnerability
Modified: torstatus/trunk/web/whois.php
===================================================================
--- torstatus/trunk/web/whois.php 2008-06-01 01:53:40 UTC (rev 14881)
+++ torstatus/trunk/web/whois.php 2008-06-01 14:20:07 UTC (rev 14882)
@@ -9,6 +9,12 @@
// Include configuration settings
include("config.php");
+// Ensure that the WHOIS service is available, otherwise die
+if (!defined("WHOISPath"))
+{
+ exit;
+}
+
$ip = $_GET['ip'];
if (!preg_match("/^\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}$/",$ip))
{
More information about the tor-commits
mailing list