Netsyms/NiceDirlist
2
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Ignore URL arguments when checking directory

Browse Source
This commit is contained in:
Skylar Ittner 2019-01-01 16:07:58 -07:00
parent 7f931b77f7
commit 4532d43aeb
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
index.php
View File

@ -1191,7 +1191,7 @@ $EXT2MIME = [
"ice" => "x-conference/x-cooltalk", "ice" => "x-conference/x-cooltalk",
]; ];
$path = $_SERVER['REQUEST_URI']; $path = explode('?', $_SERVER['REQUEST_URI'], 2)[0];
$dir = realpath(__DIR__ . $path); $dir = realpath(__DIR__ . $path);
if (strpos($dir, $ROOTPATH) !== 0) { if (strpos($dir, $ROOTPATH) !== 0) {
die("Access denied."); die("Access denied.");