mirror of
https://github.com/smogon/pokemon-showdown-client.git
synced 2026-03-21 17:50:29 -05:00
e3fcaa492c
This adds the BOM to all HTTP pages as per the HTML5 spec and ensures all pages use UTF-8 as their meta charset (which is still kept for compatibility with older browsers).
38 lines
1009 B
PHP
38 lines
1009 B
PHP
<?php
|
|
|
|
/*
|
|
|
|
License: GPLv2 or later
|
|
<http://www.gnu.org/licenses/gpl-2.0.html>
|
|
|
|
*/
|
|
|
|
error_reporting(E_ALL);
|
|
|
|
if (@$_GET['act'] === 'dlteam') {
|
|
header("Content-Type: text/plain; charset=utf-8");
|
|
if (substr(@$_SERVER['HTTP_REFERER'], 0, 32) !== 'https://play.pokemonshowdown.com') {
|
|
// since this is only to support Chrome on HTTPS, we can get away with a very specific referer check
|
|
die("access denied");
|
|
}
|
|
echo base64_decode(@$_GET['team']);
|
|
die();
|
|
}
|
|
|
|
if (preg_match('/^http\\:\\/\\/[a-z0-9]+\\.psim\\.us\\//', $_SERVER['HTTP_REFERER'] ?? '')) {
|
|
header("Access-Control-Allow-Origin: *");
|
|
} else if ($_POST['sid'] ?? null) {
|
|
header("Access-Control-Allow-Origin: *");
|
|
}
|
|
// header("X-Debug: " . @$_SERVER['HTTP_REFERER']);
|
|
|
|
include_once 'lib/ntbb-session.lib.php';
|
|
include_once '../pokemonshowdown.com/config/servers.inc.php';
|
|
include_once 'lib/dispatcher.lib.php';
|
|
|
|
$dispatcher = new ActionDispatcher(array(
|
|
new DefaultActionHandler(),
|
|
new LadderActionHandler()
|
|
));
|
|
$dispatcher->executeActions();
|