fix vul & update single-nginx.yml

Author: Ph0rse

CTFd/auth.py

@@ -159,9 +159,9 @@ def reset_password(data=None):
 def register():
     errors = get_errors()
     if request.method == "POST":
-        name = request.form["name"]
-        email_address = request.form["email"]
-        password = request.form["password"]
+        name = request.form.get("name","").strip()
+        email_address = request.form.get("email","").strip().lower()
+        password = request.form.get("password","").strip()
 
         name_len = len(name) == 0
         names = Users.query.add_columns("name", "id").filter_by(name=name).first()

CTFd/plugins/ctfd_glowworm/vulns/web_yunnan_simple/html/a.php

@@ -1,13 +1,13 @@
 server {
     listen 80;
-    server_name localhost;
+    server_name h1ve.dao.ge;
 
     root    /usr/share/nginx/html;
     index index.html index.htm index.php;
     include /opt/verynginx/nginx_conf/in_server_block.conf;
 
     location / {
-        proxy_pass http://main:8000;
+        proxy_pass http://main:4000;
 
         #settings
         proxy_set_header   Host             $host;
@@ -17,7 +17,7 @@ server {
     }
 
     location /events {
-        proxy_pass  http://main:8000/events;
+        proxy_pass  http://main:4000/events;
         proxy_set_header Connection '';
         proxy_http_version 1.1;
         chunked_transfer_encoding off;