blallo/rss-bridge
1
0
Fork 1
Code Issues Pull requests Releases Wiki Activity

[VkBridge] use 'Group or user name' parameter instead of full URI

Browse source 
This breaks compatibility with previous versions of VkBridge (which
seems broken anyway).
Bridges should never use full URIs as inputs since their validation will
always be more complicated, hence prone to security issues,
than rebuilding a clean URI from simple validated inputs.
This commit is contained in:
Pierre Mazière 2016-09-04 14:40:38 +02:00
parent 0c139941d9
commit 3daeacc208
1 changed files with 8 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

13
bridges/VkBridge.php
View file

@ -6,18 +6,21 @@ class VkBridge extends BridgeAbstract {
const NAME = "VK.com";
const URI = "http://vk.com/";
const DESCRIPTION = "Working with open pages";
const PARAMETERS=array(
'Url on page group or user' => array(
const PARAMETERS=array( array(
'u'=>array(
'name'=>'Url',
'name'=>'Group or user name',
'required'=>true
)
)
);
public function getURI(){
return static::URI.urlencode($this->getInput('u'));
}
public function collectData(){
$text_html = $this->getContents(urldecode($this->getInput('u')))
or $this->returnServerError('No results for this query.');
$text_html = $this->getContents($this->getURI())
or $this->returnServerError('No results for group or user name "'.$this->getInput('u').'".');
$text_html = iconv('windows-1251', 'utf-8', $text_html);
$html = str_get_html($text_html);
foreach ($html->find('div.post_table') as $post) {