From 53be1a515220f2206ee440a12ca00351b37f9d84 Mon Sep 17 00:00:00 2001
From: Sergii Spivak <sergey.spivak@gmail.com>
Date: Thu, 25 Apr 2024 23:29:07 +0300
Subject: [PATCH] update

---
 asset/.gitkeep          | 0
 config.inc              | 3 ++-
 history.php             | 2 +-
 lib/class/peeringdb.php | 2 +-
 4 files changed, 4 insertions(+), 3 deletions(-)
 create mode 100644 asset/.gitkeep

diff --git a/asset/.gitkeep b/asset/.gitkeep
new file mode 100644
index 0000000..e69de29
diff --git a/config.inc b/config.inc
index a251e96..361b88d 100644
--- a/config.inc
+++ b/config.inc
@@ -39,7 +39,8 @@ $customlinks = array(
 	'RIPEstat' => 'https://stat.ripe.net/AS%as%#tabId=at-a-glance',
 	'CIDR v4' => 'http://www.cidr-report.org/cgi-bin/as-report?as=AS%as%&view=2.0',
 	'CIDR v6' => 'http://www.cidr-report.org/cgi-bin/as-report?as=AS%as%&view=2.0&v=6',
-	'Radar Qrator' => 'https://radar.qrator.net/as%as%/'
+	'Radar Qrator' => 'https://radar.qrator.net/as%as%/',
+	'BGP.Tools' => 'https://bgp.tools/as/%as%/'
 );
 
 /* Custom time intervals for top N AS */
diff --git a/history.php b/history.php
index eadd054..7805d31 100644
--- a/history.php
+++ b/history.php
@@ -93,7 +93,7 @@ if ( isset($_GET['as']) ) {
                 <div class="box-body">
                   <form class="navbar-form navbar-left" role="search">
                   <div class="input-group">
-                  <input type="text" class="form-control menu-input" name="as" placeholder="Search AS" value="<?php echo $val_searchas; ?>">
+                  <input type="text" class="form-control menu-input" name="as" placeholder="Search AS" value="<?php echo htmlspecialchars($val_searchas); ?>">
                   <span class="input-group-btn">
                   <button type="submit" class="btn btn-flat button-input"><i class="fa fa-search"></i></button>
                   </span>
diff --git a/lib/class/peeringdb.php b/lib/class/peeringdb.php
index 51934e5..dbc00ed 100644
--- a/lib/class/peeringdb.php
+++ b/lib/class/peeringdb.php
@@ -10,7 +10,7 @@ class PeeringDB {
 
   public function __construct() {
     global $peeringdb;
-    $this->url = 'https://peeringdb.com/api';
+    $this->url = 'https://www.peeringdb.com/api';
   }
 
   protected function sendRequest( $url ) {