extracting only the 16 hex characters of the query string as paste ID, addressing #396

2019-01-20 12:20:37 +01:00
parent cc53d95ed1
commit 79a858f176
5 changed files with 7 additions and 5 deletions
--- a/lib/Request.php
+++ b/lib/Request.php
@@ -100,7 +100,9 @@ class Request
            array_key_exists('QUERY_STRING', $_SERVER) &&
            !empty($_SERVER['QUERY_STRING'])
        ) {
-            $this->_params['pasteid'] = $_SERVER['QUERY_STRING'];
+            $this->_params['pasteid'] = preg_match(
+                '/[a-f0-9]{16}/', $_SERVER['QUERY_STRING'], $match
+            ) ? $match[0] : 'invalid id';
        }

        // prepare operation, depending on current parameters