Get url from query string

  • Resolved bramdk1

    (@bramdk1)


    8 years ago

    Hello,

    I’m using the shortcode to display a certain field from a website which is retrieved from a query string.
    It works fine and retrieves the ?website=https://google.nl website.
    Unfortunately it conflicts with WP somehow, it gives a blank when I’m trying to log in.

    I know it’s a modification, but it would really help me out.

    function SHORTCURL_remote_get($attr, $url = "") {

	$return = '';

	$debug = '';

	$error = '';

	//THIS CUSTOM GIVES 3 ERRORS on activating, IT WORKS, BUT GIVE WHITE SCREEN WHEN LOGGING IN /wp-admin

	$attr["url"] = $_GET['website'];

	//EOF CUSTOM
Viewing 1 replies (of 1 total)
  • Plugin Author Eli

    (@scheeeli)

    Fetching content from another site has an inherent security risk, so you (as the developer of your site ) can enter a URL in the shortcode based on the trust that you have in the source page you are pulling that content from. If you allow this function to pull the URL from your QUERY_STRING than you are allowing the visitor to to craft the cURL call, and this is simply not safe yor you or your visitors. So, you can make that that change to the code on your site on your own but I would not recommend it and I certainly won’t be making that change to my plugin.

Viewing 1 replies (of 1 total)
  • The topic ‘Get url from query string’ is closed to new replies.