vhad/wordpress-develop
1
0
Fork 0
mirror of https://github.com/gosticks/wordpress-develop.git synced 2026-08-12 04:40:26 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add some page template validation

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@7921 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren
2008-05-12 23:51:54 +00:00
parent eb744058fb
commit 9faab00411
3 changed files with 17 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
wp-admin/includes/file.php
-16
View File
@@ -68,22 +68,6 @@ function wp_tempnam($filename = '', $dir = ''){
return $filename;
}
function validate_file( $file, $allowed_files = '' ) {
if ( false !== strpos( $file, '..' ))
return 1;
if ( false !== strpos( $file, './' ))
return 1;
if (':' == substr( $file, 1, 1 ))
return 2;
if (!empty ( $allowed_files ) && (!in_array( $file, $allowed_files ) ) )
return 3;
return 0;
}
function validate_file_to_edit( $file, $allowed_files = '' ) {
$file = stripslashes( $file );
wp-includes/functions.php
+16
View File
@@ -1749,4 +1749,20 @@ function apache_mod_loaded($mod, $default = false) {
return $default;
}
function validate_file( $file, $allowed_files = '' ) {
if ( false !== strpos( $file, '..' ))
return 1;
if ( false !== strpos( $file, './' ))
return 1;
if (':' == substr( $file, 1, 1 ))
return 2;
if (!empty ( $allowed_files ) && (!in_array( $file, $allowed_files ) ) )
return 3;
return 0;
}
?>
wp-includes/theme.php
+1 -1
View File
@@ -419,7 +419,7 @@ function get_page_template() {
if ( 'default' == $template )
$template = '';
if ( !empty($template) && file_exists(TEMPLATEPATH . "/$template") )
if ( !empty($template) && !validate_file($template) && file_exists(TEMPLATEPATH . "/$template") )
$template = TEMPLATEPATH . "/$template";
elseif ( file_exists(TEMPLATEPATH . "/page.php") )
$template = TEMPLATEPATH . "/page.php";