ثغرات جديدة vb3.0.5

$thishost = preg_quote($http_host . !empty($referrer_parts['port']) ? ":$referrer_parts[port]" : ''* '#');

$refhost = $referrer_parts['host'] . !empty($referrer_parts['port']) ? ":$referrer_parts[port]" : '';

 

if (!preg_match('#' . $thishost . '$#siU'* $refhost))

 

$http_port = intval($referrer_parts['port']);

$refhost = $referrer_parts['host'] . (!empty($http_port) ? ":$http_port" : '');

 

if (!preg_match('#' . preg_quote($http_host* '#') . '$#siU'* $refhost))

 

construct_checkboxes($pm);

$pm['recipients'] = htmlspecialchars_uni($pm['recipients']);