PHP Cors Proxy: Fix warnings, support passing URL via the search path

WordPress · Jul 12, 2024 · 54ca521 · 54ca521
1 parent 126f0e2
commit 54ca521
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 2 deletions.
diff --git a/packages/playground/php-cors-proxy/proxy-functions.php b/packages/playground/php-cors-proxy/proxy-functions.php
@@ -16,8 +16,9 @@ function get_target_url($server_data=null) {
         $targetUrl = substr($targetUrl, strlen($server_data['SCRIPT_NAME']));
     }
 
-    // Remove the leading slash
-    if ($targetUrl[0] === '/') {
+    // Remove the leading slash or question mark, depending on the method
+    // used to access the script
+    if (str_starts_with($targetUrl, '/') || str_starts_with($targetUrl, '?')) {
         $targetUrl = substr($targetUrl, 1);
     }
 

diff --git a/packages/playground/php-cors-proxy/proxy.php b/packages/playground/php-cors-proxy/proxy.php
@@ -36,6 +36,11 @@ function set_cors_headers() {
 
 // Get the full target URL from the request path
 $targetUrl = get_target_url($_SERVER);
+if(!$targetUrl) {
+    http_response_code(400);
+    echo "Bad Request\n\nNo URL provided";
+    exit;
+}
 $resolved = url_validate_and_resolve($targetUrl);
 $host = $resolved['host'];
 $resolvedIp = $resolved['ip'];