* (bug 14154) Captcha domain whitelist regexes now anchored, fixing spammable hole

This commit is contained in:
Brion Vibber 2008-05-16 19:14:51 +00:00
parent 1ca07e728a
commit 4f1281fc9c

View file

@ -408,7 +408,7 @@ class SimpleCaptcha {
//$regex = 'http://+[a-z0-9_\-.]*(' . implode( '|', $lines ) . ')';
//return '/' . str_replace( '/', '\/', preg_replace('|\\\*/|', '/', $regex) ) . '/Si';
$regexes = '';
$regexStart = '/http:\/\/+[a-z0-9_\-.]*(';
$regexStart = '/^https?:\/\/+[a-z0-9_\-.]*(';
$regexEnd = ')/Si';
$regexMax = 4096;
$build = false;