From c9ba0767c72b17304995e7dbc6328056ab32c312 Mon Sep 17 00:00:00 2001
From: Florian Schaal <info@schaal-24.de>
Date: Mon, 26 Sep 2016 19:34:56 +0200
Subject: [PATCH] use php filter_var database remote-ip (#4215)
---
server/plugins-available/mysql_clientdb_plugin.inc.php | 2 ++
1 file changed, 2 insertions(+)
diff --git a/server/plugins-available/mysql_clientdb_plugin.inc.php b/server/plugins-available/mysql_clientdb_plugin.inc.php
index 4ff13a089d..0c6a98cf54 100644
--- a/server/plugins-available/mysql_clientdb_plugin.inc.php
+++ b/server/plugins-available/mysql_clientdb_plugin.inc.php
@@ -105,6 +105,8 @@ class mysql_clientdb_plugin {
$valid = true;
if($db_host == '%' || $db_host == 'localhost') {
$valid = true;
+ } elseif(function_exists('filter_var')) {
+ if(!filter_var($db_host, FILTER_VALIDATE_IP)) $valid=false;
} elseif(preg_match("/^((25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\\.){3}(25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)$/", $db_host)) {
$groups = explode('.', $db_host);
foreach($groups as $group){
--
GitLab