From 266376af2e0cc52868fc345554440b81460da114 Mon Sep 17 00:00:00 2001 From: Derky Date: Thu, 21 Sep 2023 15:48:01 +0200 Subject: [PATCH] [ticket/security/279] Use utf8_basename for smilies pak file check SECURITY-279 --- phpBB/includes/acp/acp_icons.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/phpBB/includes/acp/acp_icons.php b/phpBB/includes/acp/acp_icons.php index e577762506..0a5eec4471 100644 --- a/phpBB/includes/acp/acp_icons.php +++ b/phpBB/includes/acp/acp_icons.php @@ -550,7 +550,7 @@ class acp_icons trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING); } - if (!($pak_ary = @file($phpbb_root_path . $img_path . '/' . basename($pak)))) + if (!($pak_ary = @file($phpbb_root_path . $img_path . '/' . utf8_basename($pak)))) { trigger_error($user->lang['PAK_FILE_NOT_READABLE'] . adm_back_link($this->u_action), E_USER_WARNING); }