Prevent Path Traversal

This commit is contained in:
seiichiro 2022-01-11 17:10:11 +01:00
parent fb9ef8ecd3
commit d8cbfea8f4

View file

@ -43,7 +43,7 @@ if (isset($_SESSION['files'])
if ($r_imagedir === false || strpos($r_imagedir, $r_basedir . DIRECTORY_SEPARATOR) !== 0) { if ($r_imagedir === false || strpos(Helpers::end_dir($r_imagedir), $r_basedir.DIRECTORY_SEPARATOR) !== 0) {
print_r($r_basedir); print_r($r_basedir);
print_r($r_imagedir); print_r($r_imagedir);