CVE-2017-12906

burpheart · Aug 14, 2020 · 26d911e · 26d911e
1 parent e244c44
commit 26d911e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/cheaters.php b/cheaters.php
@@ -24,7 +24,7 @@
 $ratio = @$_GET['r'];
 if (!is_valid_id($ratio) && $ratio>=1 && $ratio<=7) $ratio = '';
 
-echo '<center><form method="get" action="'.$_SERVER["PHP_SELF"].'">';
+echo '<center><form method="get" action="">';
 begin_table();
 
 echo '<tr><th colspan="4">Important</th></tr><tr><td colspan="4" class="left">';

diff --git a/confirm_resend.php b/confirm_resend.php
@@ -99,7 +99,7 @@ function bark($msg) {
 	}
 	$s .= "\n</select>";
 	?>
-	<form method="get" action="<?php echo $_SERVER['PHP_SELF'] ?>">
+	<form method="get" action="">
 <?php
 	print("<div align=\"right\">".$lang_confirm_resend['text_select_lang']. $s . "</div>");
 ?>