/** * Check url base from get[url] * validates from accepted urls only * * @param none * @return mixed | displays main screen. */ protected static function check_url() { $file_loc = utility::get_base(); if (isset($_GET["url"]) && !empty($_GET["url"])) { $url = trim($_GET["url"]); if (strpos($url, "/") > -1) { header("Location:{$file_loc}"); exit; } else { // to prevent call from outside ajax if (in_array($url, self::$clean_url) && !empty($_POST["args"])) { return $url; } else { header("Location:{$file_loc}"); exit; } } } else { return false; } }
<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <title>Main Page</title> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="description" content="" /> <meta name="SKYPE_TOOLBAR" content="SKYPE_TOOLBAR_PARSER_COMPATIBLE" /> <link rel="stylesheet" type="text/css" href="styles/rst.css" media="screen" /> <link rel="stylesheet" type="text/css" href="styles/large.css" media="screen and (min-width:1010px)" /> <link rel="stylesheet" type="text/css" href="styles/medium.css" media="screen and (min-width:820px) and (max-width:1009px)" /> <link rel="stylesheet" type="text/css" href="styles/mobile.css" media="screen and (max-width:819px)" /> <script type="text/javascript" src="scripts/jquery.js"></script> <script type="text/javascript" src="scripts/json.js"></script> <script type="text/javascript" src="scripts/main.js"></script> </head> <body> <input type="hidden" id="base_url" value="<?php echo utility::get_base(); ?> "> <div id="header"> TESTAPP </div>