diff --git a/index.php b/index.php index 67d10ff..ac2e1c1 100644 --- a/index.php +++ b/index.php @@ -41,7 +41,11 @@ if (isset($_SESSION['files']) } else { $r_imagedir = realpath($imagedir.$dir); + + if ($r_imagedir === false || strcmp($r_imagedir, $r_basedir . DIRECTORY_SEPARATOR) !== 0) { + print_r($r_basedir); + print_r($r_imagedir); print "Path Traversal Detected!"; exit(); }