*/ error_reporting(E_ALL); if (@$_GET['act'] === 'dlteam') { header("Content-Type: text/plain"); if (substr(@$_SERVER['HTTP_REFERER'], 0, 32) !== 'https://play.pokemonshowdown.com') { // since this is only to support Chrome on HTTPS, we can get away with a very specific referer check die("access denied"); } echo base64_decode(@$_GET['team']); die(); } if (preg_match('/^http\\:\\/\\/[a-z0-9]+\\.psim\\.us\\//', @$_SERVER['HTTP_REFERER'])) { header("Access-Control-Allow-Origin: *"); } // header("X-Debug: " . @$_SERVER['HTTP_REFERER']); include_once 'lib/ntbb-session.lib.php'; include_once '../pokemonshowdown.com/config/servers.inc.php'; include_once 'lib/dispatcher.lib.php'; $dispatcher = new ActionDispatcher(array( new DefaultActionHandler(), new LadderActionHandler() )); $dispatcher->executeActions();