Prevent Path Traversal

2022-01-11 17:06:45 +01:00 · 2022-01-11 17:06:45 +01:00 · 2506b5b6f0
parent 81ae8f3016
commit 2506b5b6f0
1 changed files with 4 additions and 0 deletions
--- a/index.php
+++ b/index.php
@ -41,7 +41,11 @@ if (isset($_SESSION['files'])
 } else {
  $r_imagedir = realpath($imagedir.$dir);

+
+  
  if ($r_imagedir === false || strcmp($r_imagedir, $r_basedir . DIRECTORY_SEPARATOR) !== 0) {
+    print_r($r_basedir);
+    print_r($r_imagedir);
    print "Path Traversal Detected!";
    exit();
  }