From 9d8654c18347f26059c16990468c6a7a2c86d11a Mon Sep 17 00:00:00 2001
From: Uwe Steinmann <steinm@debian.org>
Date: Thu, 25 Feb 2021 12:04:27 +0100
Subject: [PATCH] fix major security issue

---
 index.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/index.php b/index.php
index 98b5511f3..049d7a48e 100644
--- a/index.php
+++ b/index.php
@@ -39,7 +39,7 @@ if(true) {
 				$file = substr($uri->getPath(), 1);
 			if(file_exists($file) && is_file($file)) {
 				$_SERVER['SCRIPT_FILENAME'] = basename($file);
-				include($file);
+//				include($file);
 				exit;
 			}
 			if($request->isXhr()) {