makary/phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-10 13:28:55 +00:00
Code Issues Projects Releases Packages Wiki Activity

[ticket/security/279] Use utf8_basename for smilies pak file check

Browse source 
SECURITY-279
This commit is contained in:
Derky 2023-09-21 15:48:01 +02:00 • committed by Marc Alexander
parent c4f42c1573
commit 266376af2e
No known key found for this signature in database
GPG key ID: 50E0D2423696F995
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
phpBB/includes/acp/acp_icons.php
View file

@ -550,7 +550,7 @@ class acp_icons
trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING); trigger_error($user->lang['FORM_INVALID'] . adm_back_link($this->u_action), E_USER_WARNING);
} }
if (!($pak_ary = @file($phpbb_root_path . $img_path . '/' . basename($pak)))) if (!($pak_ary = @file($phpbb_root_path . $img_path . '/' . utf8_basename($pak))))
{ {
trigger_error($user->lang['PAK_FILE_NOT_READABLE'] . adm_back_link($this->u_action), E_USER_WARNING); trigger_error($user->lang['PAK_FILE_NOT_READABLE'] . adm_back_link($this->u_action), E_USER_WARNING);
} }