Merge pull request #29 from umbrae/fix-port

Disallow ports or non-http(s) schemes

Author: closacco

proxy.php

@@ -4,6 +4,14 @@
 
 if (!$url || !preg_match("/^https?:/i", $url)) {
     echo '{ "result": "Invalid URL. Please check your URL and try again.", "error": true }';
+    return;
+}
+
+$parsed_url = parse_url($url);
+$scheme = strtolower($parsed_url['scheme']);
+if (array_key_exists('port', $parsed_url) || ($scheme !== "http" && $scheme !== "https")) {
+    echo '{ "result": "Invalid URL - Please check your URL and try again.", "error": true }';
+    return;
 }
 
 $ch = curl_init($url);