WxSim Temperature Forecast Comparison Script

Software WxSIM Display Utilities
,
4

This is fantastic, Jim! What a great script set to allow us to compare actuals v.s. our own and a reference forecast.

I have one suggestion to help keep the scripts safe from abuse by miscreants … use an allowed-file name for the config param so it won’t be vulnerable. Something like

<?php
$allowed = array (
  'am' => 'fc-configAM.php',
  'pm' => 'fc-configPM.php'
);

$configfile = "fc-config.php";

if (isset($_REQUEST['config']) and isset($allowed[$_REQUEST['config'])) {
  $configfile = $allowed[$_REQUEST['config']);
}
?>

That way, no bad juju can be jammed into the script :slight_smile:

Best regards,
Ken