Hallo Leute,
beim Aufruf des Contao Check bei Host Europe kommt folgende Meldung:
Code:
*/ class Router { /** * Dispatch a request and send the response * * @throws RuntimeException If the command name is invalid */ public static function dispatch() { // Default command $file = 'controller/index.php'; $class = 'Index'; $command = filter_var($_GET['c'], FILTER_SANITIZE_STRING); // Check the command (thanks to Arnaud Buchoux) if (static::isInsecurePath($command)) { throw new RuntimeException("Invalid command $command"); } // Custom command if ($command != '' && file_exists("controller/$command.php")) { $file = "controller/$command.php"; $class = str_replace(' ', '', ucwords(str_replace('-', ' ', $command))); } include $file; $controller = new $class(); $controller->run(); } /** * Insecure path potentially containing directory traversal * * @param string $path The file path * * @return boolean True if the file path is insecure */ public static function isInsecurePath($path) { // Normalize backslashes $path = str_replace('\\', '/', $path); $path = preg_replace('#//+#', '/', $path); // Equals .. if ($path == '..') { return true; } // Begins with ./ if (substr($path, 0, 2) == './') { return true; } // Begins with ../ if (substr($path, 0, 3) == '../') { return true; } // Ends with /. if (substr($path, -2) == '/.') { return true; } // Ends with /.. if (substr($path, -3) == '/..') { return true; } // Contains /../ if (strpos($path, '/../') !== false) { return true; } return false; } } Router::dispatch();
Es läuft PHP 5.6
Ruft man nur die Domain oder das BE auf kommt:
Das sieht für mich aus, als würde eine falsche PHP Version laufen obwohl 5.6 eingestellt ist.
Hat da jemand einen Tipp für mich?
Gruß
tschero