Rooba
/
boinc
mirror of https://github.com/BOINC/boinc.git
1
0
Fork 0
Code Issues 1 Packages Projects Releases Wiki Activity

Due to magic quotes check the IDs and hashes are now always 20 bytes 

svn path=/trunk/boinc/; revision=13825
This commit is contained in:
Janus B. Kristensen 2007-10-10 21:06:10 +00:00
parent d6d1b2bf73
commit 05f6bc678f
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
html/bt/announce.php
View File

@ -17,9 +17,9 @@ function trackerError($error){
}
$info_hash = rawurldecode($_GET["info_hash"]);
if (strlen($info_hash)<20) throw new IllegalArgumentException("Malformed infohash key (length ".strlen($info_hash).")");
if (strlen($info_hash)!=20) throw new IllegalArgumentException("Malformed infohash key (length ".strlen($info_hash).")");
$peer_id = $_GET["peer_id"];
if (strlen($peer_id)<20) throw new IllegalArgumentException("Malformed peer ID (".strlen($peer_id).")");
if (strlen($peer_id)!=20) throw new IllegalArgumentException("Malformed peer ID (".strlen($peer_id).")");
$port = $_GET["port"];
if (!is_numeric($port)) throw new IllegalArgumentException("Non-numeric port supplied");
$event = $_GET["event"];
@ -43,7 +43,7 @@ if (isIPBanned($ip)){
// Check that the info_hash is one that we allow:
$queryHandle = mysql_query("SELECT * from bittorrent_files where info_hash=\"".process_user_text($info_hash)."\""); echo mysql_error();
if (!mysql_num_rows($queryHandle)){
trackerError("The tracker does not allow tracking of this file:".$info_hash);
trackerError("The tracker does not allow tracking of this file:".$info_hash . " [] ".$_GET["info_hash"]);
}
$infoHashObject = mysql_fetch_object($queryHandle);

2
html/bt/scrape.php
View File

@ -15,7 +15,7 @@ function trackerError($error){
}
$info_hash = rawurldecode($_GET["info_hash"]);
if (strlen($info_hash)<20) throw new IllegalArgumentException("Malformed infohash key (length ".strlen($info_hash).")");
if (strlen($info_hash)!=20) throw new IllegalArgumentException("Malformed infohash key (length ".strlen($info_hash).")");
if (!$ip){
$ip = $_SERVER["REMOTE_ADDR"];