From 2d346a1bc8976a129aefa5b903414f81bb9d8904 Mon Sep 17 00:00:00 2001 From: RD WebDesign Date: Tue, 20 Sep 2022 15:38:20 -0300 Subject: [PATCH] Remove all unwanted characters from `$versions` Signed-off-by: RD WebDesign --- scripts/pi-hole/php/update_checker.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/scripts/pi-hole/php/update_checker.php b/scripts/pi-hole/php/update_checker.php index fe133073..3ff0470a 100644 --- a/scripts/pi-hole/php/update_checker.php +++ b/scripts/pi-hole/php/update_checker.php @@ -30,6 +30,9 @@ if (!is_readable($versionsfile)) { } else { $versions = parse_ini_file($versionsfile); + // Allow only valid characters + $versions = preg_replace('/[^[:alnum:]._:\/-]/i', '', $versions); + // Get Pi-hole core branch / version / commit // Check if on a dev branch $core_branch = $versions['CORE_BRANCH'];