mirror of
https://git.code.sf.net/p/seeddms/code
synced 2025-02-06 07:04:57 +00:00
fix major security issue
This commit is contained in:
parent
35702a30b4
commit
9d8654c183
|
@ -39,7 +39,7 @@ if(true) {
|
||||||
$file = substr($uri->getPath(), 1);
|
$file = substr($uri->getPath(), 1);
|
||||||
if(file_exists($file) && is_file($file)) {
|
if(file_exists($file) && is_file($file)) {
|
||||||
$_SERVER['SCRIPT_FILENAME'] = basename($file);
|
$_SERVER['SCRIPT_FILENAME'] = basename($file);
|
||||||
include($file);
|
// include($file);
|
||||||
exit;
|
exit;
|
||||||
}
|
}
|
||||||
if($request->isXhr()) {
|
if($request->isXhr()) {
|
||||||
|
|
Loading…
Reference in New Issue
Block a user