[ticket/12099] Clean some paths before using them

PHPBB3-12099
This commit is contained in:
Joas Schilling 2014-05-11 15:35:54 +02:00
parent b378bd7a2e
commit 64f51bd3dd

View file

@ -98,7 +98,7 @@ class path_helper
{
$path = substr($path, strlen($this->phpbb_root_path));
return $this->get_web_root_path() . $path;
return $this->filesystem->clean_path($this->get_web_root_path() . $path);
}
return $path;
@ -158,7 +158,7 @@ class path_helper
*/
if ($path_info === '/' && preg_match('/app\.' . $this->php_ext . '\/$/', $request_uri))
{
return $this->web_root_path = $this->phpbb_root_path . '../';
return $this->web_root_path = $this->filesystem->clean_path('../' . $this->phpbb_root_path);
}
/*