PHP Warning: ./rucore/collab/reference.php

Project:RUcore Website
Version:8.x
Component:Code
Category:bug report
Priority:normal
Assigned:chadmills
Status:closed
Description

[10-Jul-2016 04:24:58 America/New_York] PHP Warning: preg_match(): Unknown modifier '.' in /home/httpd/html/rucore/collab/reference.php on line 129

Comments

#1

Status:active» closed

The issue came from someone probing the system for weakness. In particular the submitted URL was:

<a href="https://rucore.libraries.rutgers.edu/collab/reference.php?group=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%2500&amp;auth=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%2500&amp;type=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%2500&amp;submit=Search" title="https://rucore.libraries.rutgers.edu/collab/reference.php?group=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%2500&amp;auth=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%2500&amp;type=..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%2500&amp;submit=Search">https://rucore.libraries.rutgers.edu/collab/reference.php?group=..%2F..%...</a>

Swapping out the preg_match() for stripos() corrected the problem.

Back to top