mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-08-11 09:04:38 +02:00
Code Issues Releases Wiki Activity

Issue GHSA-92fr-7h4f-22pp

Browse Source
This commit is contained in:
camer0n
2023-08-22 13:28:10 -07:00
parent abf94d0310
commit 9aa8de4f7d
3 changed files with 11 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
e107_handlers/file_class.php
View File

@@ -2233,6 +2233,10 @@ class e_file
$tmp = parse_url($targetFile);
$targetFile = $tmp['path'];
$remote = true;
if(!empty($tmp['host']) && ($tmp['host'] === 'localhost' || $tmp['host'] === '127.0.0.1'))
{
return false;
}
}
$ext = pathinfo($targetFile, PATHINFO_EXTENSION);