Fixed host suffix check

derickr · derickr · commit a46c652c32e0 · 2026-03-23T11:08:11.000Z
diff --git a/include/prepend.inc b/include/prepend.inc
@@ -26,7 +26,7 @@ header("Permissions-Policy: interest-cohort=()");
     }
 
     $host = parse_url($_SERVER["HTTP_ORIGIN"]);
-    if (strncmp(strrev($host["host"]), strrev("php.net"), strlen("php.net")) != 0) {
+    if (!preg_match('/^(.+\.)?php\.net$/', $host["host"])) {
         if ($host["host"] != $_SERVER["SERVER_NAME"]) {
             exit(10);
         }

Original file line number	Diff line number	Diff line change
`@@ -26,7 +26,7 @@ header("Permissions-Policy: interest-cohort=()");`
`26`	`26`	`}`
`27`	`27`
`28`	`28`	`$host = parse_url($_SERVER["HTTP_ORIGIN"]);`
`29`		`- if (strncmp(strrev($host["host"]), strrev("php.net"), strlen("php.net")) != 0) {`
	`29`	`+ if (!preg_match('/^(.+\.)?php\.net$/', $host["host"])) {`
`30`	`30`	`if ($host["host"] != $_SERVER["SERVER_NAME"]) {`
`31`	`31`	`exit(10);`
`32`	`32`	`}`