gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-02-11 09:35:00 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

make sure cache dir is a directory before running exec command

Browse Source
This commit is contained in:
Uwe Steinmann 2018-06-27 18:54:08 +02:00
parent 384d1f58b5
commit 0be0ffdbe5
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
op/op.ClearCache.php
View File

@ -31,6 +31,13 @@ if(!checkFormKey('clearcache')) {
UI::exitError(getMLText("admin_tools"),getMLText("invalid_request_token"));
}
/* Make sure the cacheDir exists and isn't manipulated for executing
* commands when system() is being called.
*/
if(!is_dir($settings->_cacheDir)) {
UI::exitError(getMLText("admin_tools"),getMLText("error_cleared_cache"));
}
if(!empty($_POST['preview'])) {
$cmd = 'rm -rf '.$settings->_cacheDir.'/[1-9]*';
$ret = null;