DataTables/examples/resources/examples.php

<?php

if ( isset( $_POST['src'] ) && preg_match( '/^scripts\/[a-zA-Z_\-_]+\.php$/', $_POST['src'] ) !== 0 ) {
	echo htmlspecialchars( file_get_contents( '../server_side/'.$_POST['src'] ) );
}
else {
	echo '';
}
Examples: Add latest example files from the src repo 2014-02-04 11:54:36 +01:00			`<?php`

Fix - examples: Tighten up regex check to protect against LFI vulnerability Credit to Arnaud Labenne of Dotsafe.fr for finding and reporting this. 2017-04-12 21:00:44 +02:00			`if ( isset( $_POST['src'] ) && preg_match( '/^scripts\/[a-zA-Z_\-_]+\.php$/', $_POST['src'] ) !== 0 ) {`
Examples: Add latest example files from the src repo 2014-02-04 11:54:36 +01:00			`echo htmlspecialchars( file_get_contents( '../server_side/'.$_POST['src'] ) );`
			`}`
			`else {`
			`echo '';`
			`}`