uup-dump/api
8
0
Fork 2
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Fix potential path traversal vulnerabilities

Browse Source
This commit is contained in:
Kaenbyou Rin
2025-09-20 00:20:02 +02:00
parent 84a149c044
commit 887dcf71d3
3 changed files with 37 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

15
shared/packs.php
View File

@@ -16,6 +16,7 @@ limitations under the License.
*/
require_once dirname(__FILE__).'/../listid.php';
require_once dirname(__FILE__).'/utils.php';
function uupGetInfoTexts() {
$fancyLangNames = array(
@@ -204,11 +205,19 @@ function uupGetInfoTexts() {
}
function uupApiGetPacks($updateId) {
if(empty($updateId)) return [];
if(!file_exists('packs/'.$updateId.'.json.gz')) return [];
if(empty($updateId))
return [];
if(!uupApiCheckUpdateId($updateId))
return [];
if(!file_exists('packs/'.$updateId.'.json.gz'))
return [];
$genPack = @gzdecode(@file_get_contents('packs/'.$updateId.'.json.gz'));
if(empty($genPack)) return [];
if(empty($genPack))
return [];
$genPack = json_decode($genPack, 1);
return $genPack;