Upload via URL: Make sure we're not vulnerable to this buffer overflow exploit. http://www.exploit-db.com/exploits/24487/

1 files changed, 1 insertions, 0 deletions

diff --git a/post.php b/post.php
index 6bed96e1..8a8487e8 100644
--- a/post.php
+++ b/post.php
@@ -295,6 +295,7 @@ if (isset($_POST['delete'])) {
 		curl_setopt($curl, CURLOPT_USERAGENT, 'Tinyboard');
 		curl_setopt($curl, CURLOPT_BINARYTRANSFER, true);
 		curl_setopt($curl, CURLOPT_FILE, $fp);
+		curl_setopt($curl, CURLOPT_PROTOCOLS, CURLPROTO_HTTP | CURLPROTO_HTTPS);
 		
 		if (curl_exec($curl) === false)
 			error($config['error']['nomove']);