From 0d56163339de32142316476282c08f7b44dd0d91 Mon Sep 17 00:00:00 2001
From: adrien <adrien@malingrey.fr>
Date: Mon, 7 Oct 2024 20:33:03 +0200
Subject: [PATCH] filter input

---
 rdp.php | 10 +++++++---
 1 file changed, 7 insertions(+), 3 deletions(-)

diff --git a/rdp.php b/rdp.php
index c4664b8..2ecc7af 100644
--- a/rdp.php
+++ b/rdp.php
@@ -1,6 +1,10 @@
 <?php
 
-header('Content-Disposition: attachment; filename='.str_replace(':', '_', $_GET['v']).'.rdp');
+$host = filter_input(INPUT_GET, 'v', FILTER_VALIDATE_DOMAIN) ?: filter_input(INPUT_GET, 'v', FILTER_VALIDATE_IP);
+if (!$host) {
+    exit();
+}
+
+header('Content-Disposition: attachment; filename='.str_replace(':', '_', $host).'.rdp');
 header('Content-Type: application/rdp');
-echo "full address:s:${_GET['v']}\n";
-exit();
+echo "full address:s:$host\n";