From dd1ce2cb8830d94dcaa0b8e70b9406144a0e5f8d Mon Sep 17 00:00:00 2001
From: Federico Dossena <info@fdossena.com>
Date: Sat, 27 Apr 2024 15:12:32 +0200
Subject: [PATCH] Fixed vulnerability in json.php caused my missing
 Content-Type header

---
 results/json.php | 9 ++++++---
 speedtest.js     | 2 +-
 2 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/results/json.php b/results/json.php
index 9730d20..1e87e8e 100755
--- a/results/json.php
+++ b/results/json.php
@@ -1,5 +1,8 @@
 <?php
 
+error_reporting(0);
+header('Content-Type: application/json; charset=utf-8');
+
 require_once 'telemetry_db.php';
 
 /**
@@ -53,7 +56,7 @@ function formatSpeedtestData($speedtest)
 $speedtest = getSpeedtestUserById($_GET['id']);
 if (!is_array($speedtest)) {
     echo '{}';
+} else {
+    $speedtest = formatSpeedtestData($speedtest);
+    echo json_encode(array('timestamp'=>$speedtest['timestamp'],'download'=>$speedtest['dl'],'upload'=>$speedtest['ul'],'ping'=>$speedtest['ping'],'jitter'=>$speedtest['jitter'],'ispinfo'=>$speedtest['ispinfo']));
 }
-$speedtest = formatSpeedtestData($speedtest);
-
-echo json_encode(array('timestamp'=>$speedtest['timestamp'],'download'=>$speedtest['dl'],'upload'=>$speedtest['ul'],'ping'=>$speedtest['ping'],'jitter'=>$speedtest['jitter'],'ispinfo'=>$speedtest['ispinfo']));
diff --git a/speedtest.js b/speedtest.js
index ad5985a..386fd22 100755
--- a/speedtest.js
+++ b/speedtest.js
@@ -49,7 +49,7 @@ function Speedtest() {
   this._settings = {}; //settings for the speed test worker
   this._state = 0; //0=adding settings, 1=adding servers, 2=server selection done, 3=test running, 4=done
   console.log(
-    "LibreSpeed by Federico Dossena v5.3.0 - https://github.com/librespeed/speedtest"
+    "LibreSpeed by Federico Dossena v5.3.1 - https://github.com/librespeed/speedtest"
   );
 }