mirror of
https://github.com/Lastorder-DC/rhymix.git
synced 2026-01-05 09:41:40 +09:00
d2b05732ab
https://github.com/xpressengine/xe-core/issues/634 # Internet Explorer send punycode URL(ASCII) URL and non-alphabet Unicode URL URL as a referer. 인터넷 익스플로러는 리퍼러 주소로 퓨니코드 주소와 유니코드 URL을 섞어 쓰고 있습니다. AJAX 통신에는 리퍼러로 Unicode를 사용하고 요청 호스트로는 퓨니코드 URL을 사용(이건 다국어 주소 형식으로 접속하려면 이렇게 했어야 할 것)합니다. - XE strictly compare referer and server host for denying CSRF, but punycode URL and Unicode URL should be dealt as a same one. 그런데 XE는 리퍼러의 호스트와 서버 호스트를 비교합니다. punycode로 쓰인 주소와 Unicode로 쓰인 주소는 같은 주소를 지시하더라도 문자열이 다릅니다. 같은 주소를 지칭하는 다른 문자열을 punycode로 변환해서 같은 주소라고 인식할 수 있게 수정했습니다. - Fix checkCSRF function to deal both form as a same one. - Convert Unicode URL input to punycode URL on the Admin Default URL Settings. 관리자가 유니코드 형식으로 기본 주소를 입력하더라도, 퓨니코드로 변환해 저장하도록 했습니다. 퓨니코드로 저장하는 것이 여러모로 유용하기 때문입니다. - For converting punycode URL, include IDNA coverting class. 퓨니코드와 유니코드 간 변환을 위해서 IDNA 변환 클래스(LGPL사용권)를 포함시켰습니다.
133 lines
No EOL
6.2 KiB
PHP
133 lines
No EOL
6.2 KiB
PHP
<?php
|
|
$encoded = $decoded = $add = '';
|
|
header('Content-Type: text/html; charset=utf-8');
|
|
require_once('idna_convert.class.php');
|
|
|
|
$idn_version = isset($_REQUEST['idn_version']) && $_REQUEST['idn_version'] == 2003 ? 2003 : 2008;
|
|
$IDN = new idna_convert(array('idn_version' => $idn_version));
|
|
|
|
$version_select = '<select size="1" name="idn_version"><option value="2003">IDNA 2003</option><option value="2008"';
|
|
if ($idn_version == 2008) {
|
|
$version_select .= ' selected="selected"';
|
|
}
|
|
$version_select .= '>IDNA 2008</option></select>';
|
|
|
|
if (isset($_REQUEST['encode'])) {
|
|
$decoded = isset($_REQUEST['decoded']) ? stripslashes($_REQUEST['decoded']) : '';
|
|
$encoded = $IDN->encode($decoded);
|
|
}
|
|
if (isset($_REQUEST['decode'])) {
|
|
$encoded = isset($_REQUEST['encoded']) ? stripslashes($_REQUEST['encoded']) : '';
|
|
$decoded = $IDN->decode($encoded);
|
|
}
|
|
$lang = 'en';
|
|
if (isset($_REQUEST['lang'])) {
|
|
if ('de' == $_REQUEST['lang'] || 'en' == $_REQUEST['lang']) {
|
|
$lang = $_REQUEST['lang'];
|
|
$add .= '<input type="hidden" name="lang" value="'.$lang.'" />'."\n";
|
|
}
|
|
}
|
|
?>
|
|
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
|
|
<html xmlns="http://www.w3.org/1999/xhtml">
|
|
<head>
|
|
<title>phlyLabs Punycode Converter</title>
|
|
<meta name="author" content="phlyLabs" />
|
|
<meta http-equiv="content-type" content="text/html; charset=utf-8" />
|
|
<style type="text/css">
|
|
/*<![CDATA[*/
|
|
body { color:black;background:white;font-size:10pt;font-family:Verdana,Helvetica,Sans-Serif; }
|
|
body, form { margin:0; }
|
|
form { display:inline; }
|
|
input { font-size:8pt;font-family:Verdana,Helvetica,Sans-Serif; }
|
|
#round { width:730px;padding:10px;background-color:rgb(230,230,240);border:1px solid black;text-align:center;vertical-align:middle;margin:auto;margin-top:50px; }
|
|
th { font-size:9pt;font-weight:bold; }
|
|
#copy { font-size:8pt;color:rgb(60,60,80); }
|
|
#subhead { font-size:8pt; }
|
|
#bla { font-size:8pt;text-align:left; }
|
|
h5 {margin:0;font-size:11pt;font-weight:bold;}
|
|
/*]]>*/
|
|
</style>
|
|
</head>
|
|
<body>
|
|
<div id="round">
|
|
<h5>phlyLabs' pure PHP IDNA Converter</h5><br />
|
|
<span id="subhead">
|
|
See the RFCs <a href="http://faqs.org/rfcs/rfc3490.html" title="IDNA" target="_blank">3490</a>,
|
|
<a href="http://faqs.org/rfcs/rfc3491.html" title="Nameprep, a Stringprep profile" target="_blank">3491</a>,
|
|
<a href="http://faqs.org/rfcs/rfc3492.html" title="Punycode" target="_blank">3492</a> and
|
|
<a href="http://faqs.org/rfcs/rfc3454.html" title="Stringprep" target="_blank">3454</a> as well as
|
|
<a href="http://faqs.org/rfcs/rfc5890.html" target="_blank">5890</a>,
|
|
<a href="http://faqs.org/rfcs/rfc5891.html" target="_blank">5891</a>,
|
|
<a href="http://faqs.org/rfcs/rfc5892.html" target="_blank">5892</a>,
|
|
<a href="http://faqs.org/rfcs/rfc5893.html" target="_blank">5893</a> and
|
|
<a href="http://faqs.org/rfcs/rfc5894.html" target="_blank">RFC5894</a>.<br />
|
|
</span>
|
|
<br />
|
|
<div id="bla"><?php if ($lang == 'de') { ?>
|
|
Dieser Konverter erlaubt die Übersetzung von Domainnamen zwischen der Punycode- und der
|
|
Unicode-Schreibweise.<br />
|
|
Geben Sie einfach den Domainnamen im entsprechend bezeichneten Feld ein und klicken Sie dann auf den darunter
|
|
liegenden Button. Sie können einfache Domainnamen, komplette URLs (wie http://jürgen-müller.de)
|
|
oder Emailadressen eingeben.<br />
|
|
<br />
|
|
Stellen Sie aber sicher, dass Ihr Browser den Zeichensatz <strong>UTF-8</strong> unterstützt.<br />
|
|
<br />
|
|
Wenn Sie Interesse an der zugrundeliegenden PHP-Klasse haben, können Sie diese
|
|
<a href="http://phlymail.com/de/downloads/idna-convert.html">hier herunterladen</a>.<br />
|
|
<br />
|
|
Diese Klasse wird ohne Garantie ihrer Funktionstüchtigkeit bereit gestellt. Nutzung auf eigene Gefahr.<br />
|
|
Um sicher zu stellen, dass eine Zeichenkette korrekt umgewandelt wurde, sollten Sie diese immer zurückwandeln
|
|
und das Ergebnis mit Ihrer ursprünglichen Eingabe vergleichen.<br />
|
|
<br />
|
|
Fehler und Probleme können Sie gern an <a href="mailto:team@phlymail.de">team@phlymail.de</a> senden.<br />
|
|
<?php } else { ?>
|
|
This converter allows you to transfer domain names between the encoded (Punycode) notation
|
|
and the decoded (UTF-8) notation.<br />
|
|
Just enter the domain name in the respective field and click on the button right below it to have
|
|
it converted. Please note, that you might even enter complete domain names (like jürgen-müller.de)
|
|
or a email addresses.<br />
|
|
<br />
|
|
Make sure, that your browser is capable of the <strong>UTF-8</strong> character encoding.<br />
|
|
<br />
|
|
For those of you interested in the PHP source of the underlying class, you might
|
|
<a href="http://phlymail.com/en/downloads/idna-convert.html">download it here</a>.<br />
|
|
<br />
|
|
Please be aware, that this class is provided as is and without any liability. Use at your own risk.<br />
|
|
To ensure, that a certain string has been converted correctly, you should convert it both ways and compare the
|
|
results.<br />
|
|
<br />
|
|
Please feel free to report bugs and problems to: <a href="mailto:team@phlymail.com">team@phlymail.com</a>.<br />
|
|
<?php } ?>
|
|
<br />
|
|
</div>
|
|
<table border="0" cellpadding="2" cellspacing="2" align="center">
|
|
<thead>
|
|
<tr>
|
|
<th align="left">Original (Unicode)</th>
|
|
<th align="right">Punycode (ACE)</th>
|
|
</tr>
|
|
</thead>
|
|
<tbody>
|
|
<tr>
|
|
<td align="right">
|
|
<form action="<?php echo htmlspecialchars($_SERVER['PHP_SELF'], ENT_QUOTES, 'UTF-8'); ?>" method="get">
|
|
<input type="text" name="decoded" value="<?php echo htmlspecialchars($decoded, ENT_QUOTES, 'UTF-8'); ?>" size="48" maxlength="255" /><br />
|
|
<?php echo $version_select; ?>
|
|
<input type="submit" name="encode" value="Encode >>" /><?php echo $add; ?>
|
|
</form>
|
|
</td>
|
|
<td align="left">
|
|
<form action="<?php echo htmlspecialchars($_SERVER['PHP_SELF'], ENT_QUOTES, 'UTF-8'); ?>" method="get">
|
|
<input type="text" name="encoded" value="<?php echo htmlspecialchars($encoded, ENT_QUOTES, 'UTF-8'); ?>" size="48" maxlength="255" /><br />
|
|
<input type="submit" name="decode" value="<< Decode" /><?php echo $add; ?>
|
|
</form>
|
|
</td>
|
|
</tr>
|
|
</tbody>
|
|
</table>
|
|
<br />
|
|
<span id="copy">Version used: 0.9.0; © 2004-2014 phlyLabs Berlin; part of <a href="http://phlymail.com/">phlyMail</a></span>
|
|
</div>
|
|
</body>
|
|
</html>
|