aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/includes/functions_convert.php
diff options
context:
space:
mode:
authorMarc Alexander <admin@m-a-styles.de>2017-12-31 16:37:58 +0100
committerMarc Alexander <admin@m-a-styles.de>2017-12-31 16:37:58 +0100
commit7dfd57077a31d67dc18af9802f826da6b015d8fe (patch)
tree8e4c820119186dbb54bafc54ec755f35e9ccb21d /phpBB/includes/functions_convert.php
parent92350db572f3814630f5bb6e609d503ffd2c4bd5 (diff)
parent342a7cbd55829283663ad6ba29f924eeb53fca38 (diff)
downloadforums-7dfd57077a31d67dc18af9802f826da6b015d8fe.tar
forums-7dfd57077a31d67dc18af9802f826da6b015d8fe.tar.gz
forums-7dfd57077a31d67dc18af9802f826da6b015d8fe.tar.bz2
forums-7dfd57077a31d67dc18af9802f826da6b015d8fe.tar.xz
forums-7dfd57077a31d67dc18af9802f826da6b015d8fe.zip
Merge pull request #40 from phpbb/ticket/security/211
[ticket/security/211] Make sure website URL only uses http & https schemes
Diffstat (limited to 'phpBB/includes/functions_convert.php')
-rw-r--r--phpBB/includes/functions_convert.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/phpBB/includes/functions_convert.php b/phpBB/includes/functions_convert.php
index da4820134d..ba354d39ef 100644
--- a/phpBB/includes/functions_convert.php
+++ b/phpBB/includes/functions_convert.php
@@ -249,7 +249,7 @@ function validate_website($url)
{
return '';
}
- else if (!preg_match('#^[a-z0-9]+://#i', $url) && strlen($url) > 0)
+ else if (!preg_match('#^http[s]?://#i', $url) && strlen($url) > 0)
{
return 'http://' . $url;
}