makary/phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-08 04:18:52 +00:00
Code Issues Projects Releases Packages Wiki Activity

Merge branch 'ticket/rxu/10035' into develop-olympus

Browse source 
* ticket/rxu/10035:
  [ticket/10035] ACP template edit feature allows to read any files on webserver.
This commit is contained in:
Oleg Pudeyev 2011-03-10 05:22:37 -05:00
commit aa8f4000d3
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
phpBB/includes/acp/acp_styles.php
View file

@ -716,7 +716,7 @@ parse_css_file = {PARSE_CSS_FILE}
$save_changes = (isset($_POST['save'])) ? true : false; $save_changes = (isset($_POST['save'])) ? true : false;
// make sure template_file path doesn't go upwards // make sure template_file path doesn't go upwards
$template_file = str_replace('..', '.', $template_file); $template_file = preg_replace('#\.{2,}#', '.', $template_file);
// Retrieve some information about the template // Retrieve some information about the template
$sql = 'SELECT template_storedb, template_path, template_name $sql = 'SELECT template_storedb, template_path, template_name