[ SYSTEM ]: Linux wordpress 6.1.0-44-amd64 #1 SMP PREEMPT_DYNAMIC Debian 6.1.164-1 (2026-03-09) x86_64
[ SERVER ]: Apache/2.4.66 (Debian) | PHP: 8.2.30
[ USER ]: www-data | IP: 172.19.30.54
GEFORCE FILE MANAGER
/
var
/
www
/
html
/
wordpress
/
wp-content
/
plugins
/
wp-optimize
/
vendor
/
rosell-dk
/
webp-convert
/
src
/
Helpers
/
UPLOAD:
NAME
SIZE
QUICK PERMS
ACTIONS
📄 InputValidator.php
1,788 B
SET
[ EDIT ]
|
[ DEL ]
📄 MimeType.php
1,249 B
SET
[ EDIT ]
|
[ DEL ]
📄 PathChecker.php
4,040 B
SET
[ EDIT ]
|
[ DEL ]
📄 Sanitize.php
715 B
SET
[ EDIT ]
|
[ DEL ]
📄 SanityCheck.txt
7,589 B
SET
[ EDIT ]
|
[ DEL ]
DELETE SELECTED
[ CLOSE ]
EDIT: Sanitize.php
<?php namespace WebPConvert\Helpers; class Sanitize { /** * The NUL character is a demon, because it can be used to bypass other tests * See https://st-g.de/2011/04/doing-filename-checks-securely-in-PHP. * * @param string $string string remove NUL characters in */ public static function removeNUL($string) { return str_replace(chr(0), '', $string); } public static function removeStreamWrappers($string) { return preg_replace('#^\\w+://#', '', $string); } public static function path($string) { $string = self::removeNUL($string); $string = self::removeStreamWrappers($string); return $string; } }