forked from extern/egroupware
some more stupid php5.2 fixes
This commit is contained in:
parent
525abe5da6
commit
6584ab6487
@ -625,7 +625,8 @@
|
|||||||
$data = array ();
|
$data = array ();
|
||||||
}
|
}
|
||||||
|
|
||||||
if (substr ($data['string'], 0, 1) == "\\" || strstr ($data['string'], "..") || strstr ($data['string'], "\\..") || strstr ($data['string'], ".\\."))
|
if (substr ($data['string'], 0, 1) == '\\' || strpos($data['string'], '..') !== false ||
|
||||||
|
strpos($data['string'], '\\..') !== false || strpos($data['string'], '.\\.') !== false)
|
||||||
{
|
{
|
||||||
return False;
|
return False;
|
||||||
}
|
}
|
||||||
|
@ -1730,8 +1730,8 @@
|
|||||||
}
|
}
|
||||||
|
|
||||||
/* We don't allow /'s in dir names, of course */
|
/* We don't allow /'s in dir names, of course */
|
||||||
if (strstr ($p->fake_name,'/'))
|
if (strpos ($p->fake_name,'/') !== false)
|
||||||
{//echo "strstr('$p->fake_name','/')";
|
{
|
||||||
return False;
|
return False;
|
||||||
}
|
}
|
||||||
|
|
||||||
|
Loading…
Reference in New Issue
Block a user