New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix possible injection using HTTP_X_FORWARDED_FOR #3900

Merged

jmontoyaa merged 1 commit into chamilo:1.11.x from cbluesprl:cblue_fix_testip_injection

Jun 7, 2021

renaudlemaire commented Jun 4, 2021

Not really dangerous but it is possible to inject content in HTTP_X_FORWARDED_FOR and it displays.

check existance of REMOTE_ADDR in $_SERVER
display ip only if valid ip


          Fix possible injection using HTTP_X_FORWARDED_FOR

b9bb577

jmontoyaa merged commit 93011a8 into chamilo:1.11.x

Member

jmontoyaa commented Jun 7, 2021

@renaudlemaire thanks!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment