batuhanicoz/mit-license — comment on commit 2c3ec322af88381d6da97355810fccbaa5c74d6c
File: index.php line 4
By georgebashi:

You're not sanitising the $user variable here at all, which could be unsafe to pass to `file_get_contents()`.
DNS is quite strict about what you can have as a hostname though so it may not be a problem, but it makes me feel funny.