From c9ba0767c72b17304995e7dbc6328056ab32c312 Mon Sep 17 00:00:00 2001 From: Florian Schaal Date: Mon, 26 Sep 2016 19:34:56 +0200 Subject: [PATCH] use php filter_var database remote-ip (#4215) --- server/plugins-available/mysql_clientdb_plugin.inc.php | 2 ++ 1 file changed, 2 insertions(+) diff --git a/server/plugins-available/mysql_clientdb_plugin.inc.php b/server/plugins-available/mysql_clientdb_plugin.inc.php index 4ff13a089d..0c6a98cf54 100644 --- a/server/plugins-available/mysql_clientdb_plugin.inc.php +++ b/server/plugins-available/mysql_clientdb_plugin.inc.php @@ -105,6 +105,8 @@ class mysql_clientdb_plugin { $valid = true; if($db_host == '%' || $db_host == 'localhost') { $valid = true; + } elseif(function_exists('filter_var')) { + if(!filter_var($db_host, FILTER_VALIDATE_IP)) $valid=false; } elseif(preg_match("/^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/", $db_host)) { $groups = explode('.', $db_host); foreach($groups as $group){ -- GitLab