vhad/wordpress-develop
1
0
Fork 0
mirror of https://github.com/gosticks/wordpress-develop.git synced 2026-07-01 07:40:07 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Extra traversal check.

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@6520 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Ryan Boren
2007-12-29 03:14:33 +00:00
parent f2aa6e80cf
commit e605fb7f4d
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
wp-admin/includes/file.php
View File

@@ -43,6 +43,9 @@ function get_real_file_to_edit( $file ) {
}
function validate_file( $file, $allowed_files = '' ) {
if ( false !== strpos( $file, '..' ))
return 1;
if ( false !== strpos( $file, './' ))
return 1;