Nemcio/adminer
1
0
Fork 0
mirror of https://github.com/vrana/adminer.git synced 2026-07-10 17:43:11 +02:00
Code Issues Packages Projects Releases Activity

Don't allow path in HTTP servers

Browse Source
This commit is contained in:
Jakub Vrana
2025-02-18 07:58:27 +01:00
parent d9289355d7
commit 578c9fca92
4 changed files with 22 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
plugins/drivers/elastic.php
View File

@@ -78,20 +78,13 @@ if (isset($_GET["elastic"])) {
* @return bool
*/
function connect($server, $username, $password) {
$this->_url = build_http_url($server, $username, $password, "localhost", 9200);
preg_match('~^(https?://)?(.*)~', $server, $match);
$this->_url = ($match[1] ? $match[1] : "http://") . urlencode($username) . ":" . urlencode($password) . "@$match[2]";
$return = $this->query('');
if (!$return) {
return false;
if ($return) {
$this->server_info = $return['version']['number'];
}
if (!isset($return['version']['number'])) {
$this->error = lang('Invalid server or credentials.');
return false;
}
$this->server_info = $return['version']['number'];
return true;
return (bool) $return;
}
function select_db($database) {
@@ -275,6 +268,9 @@ if (isset($_GET["elastic"])) {
$connection = new Min_DB;
list($server, $username, $password) = adminer()->credentials();
if (!preg_match('~^(https?://)?[-a-z\d.]+(:\d+)?$~', $server)) {
return lang('Invalid server.');
}
if ($password != "" && $connection->connect($server, $username, "")) {
return lang('Database does not support password.');
}