mirror of
https://github.com/pi-hole/web.git
synced 2025-12-24 20:55:28 +00:00
24a22bcb55
Remote code execution could have been triggered by activating some list functionality (add and remove) via api.php. Thanks to Kacper Szurek for finding this bug. Signed-off-by: Mcat12 <newtoncat12@yahoo.com>
59 lines
1.7 KiB
PHP
59 lines
1.7 KiB
PHP
<?php
|
|
/* Pi-hole: A black hole for Internet advertisements
|
|
* (c) 2017 Pi-hole, LLC (https://pi-hole.net)
|
|
* Network-wide ad blocking via your own hardware.
|
|
*
|
|
* This file is copyright under the latest version of the EUPL.
|
|
* Please see LICENSE file for your rights under this license. */
|
|
|
|
require_once('auth.php');
|
|
|
|
$type = $_POST['list'];
|
|
|
|
// Perform all of the authentication for list editing
|
|
// when NOT invoked and authenticated from API
|
|
if (empty($api)) {
|
|
list_verify($type);
|
|
}
|
|
|
|
// Don't check if the added item is a valid domain for regex expressions. Regex
|
|
// filters are validated by FTL on import and skipped if invalid
|
|
if($type !== "regex") {
|
|
check_domain();
|
|
}
|
|
|
|
switch($type) {
|
|
case "white":
|
|
if(!isset($_POST["auditlog"]))
|
|
echo shell_exec("sudo pihole -w ${_POST['domain']}");
|
|
else
|
|
{
|
|
echo shell_exec("sudo pihole -w -n ${_POST['domain']}");
|
|
echo shell_exec("sudo pihole -a audit ${_POST['domain']}");
|
|
}
|
|
break;
|
|
case "black":
|
|
if(!isset($_POST["auditlog"]))
|
|
echo shell_exec("sudo pihole -b ${_POST['domain']}");
|
|
else
|
|
{
|
|
echo shell_exec("sudo pihole -b -n ${_POST['domain']}");
|
|
echo shell_exec("sudo pihole -a audit ${_POST['domain']}");
|
|
}
|
|
break;
|
|
case "wild":
|
|
// Escape "." so it won't be interpreted as the wildcard character
|
|
$domain = str_replace(".","\.",$_POST['domain']);
|
|
// Add regex filter for legacy wildcard behavior
|
|
add_regex("(^|\.)".$domain."$");
|
|
break;
|
|
case "regex":
|
|
add_regex($_POST['domain']);
|
|
break;
|
|
case "audit":
|
|
echo exec("sudo pihole -a audit ${_POST['domain']}");
|
|
break;
|
|
}
|
|
|
|
?>
|