Update server

wisdark · Nov 1, 2020 · 0c6a1a7 · 0c6a1a7
1 parent bc2c764
commit 0c6a1a7
Showing 1 changed file with 6 additions and 3 deletions.
diff --git a/server b/server
@@ -21,10 +21,13 @@
 
 <p>
 please run:<br>
-<?php $port = @$_GET['port'] ? $_GET['port'] : 3306 ?>
-<code>echo something here | (nc -vl <? echo $port ?> || nc -vvlp <? echo $port ?>)</code><p>
+<?php 
+$port = @$_GET['port'] ? $_GET['port'] : 3306;
+$port = preg_replace("/[^0-9]/", "", $port); // to fix the xss issue
+?>
+<code>echo something here | (nc -vl <?php echo $port; ?> || nc -vvlp <?php echo $port; ?>)</code><p>
 then hit the button below<br>
-<form name=woot>Port: <input id=port type=text name=port value=<? echo $port ?>>
+<form name=woot>Port: <input id=port type=text name=port value=<?php echo $port; ?>>
 &nbsp; <input type=button id=button value="please wait" disabled onClick="natpin()"><p>
 </form>
 <hr>