1
0
mirror of https://github.com/phpbb/phpbb.git synced 2025-05-04 06:39:14 +02:00

Merge branch 'ticket/bantu/10038' into develop-olympus

* ticket/bantu/10038:
  [ticket/10038] Use request_var() in the avatar code path of download/file.php
This commit is contained in:
Igor Wiedler 2011-02-12 19:51:21 +01:00
commit 42707053a2

View File

@ -64,7 +64,7 @@ if (isset($_GET['avatar']))
$browser = (!empty($_SERVER['HTTP_USER_AGENT'])) ? htmlspecialchars((string) $_SERVER['HTTP_USER_AGENT']) : 'msie 6.0';
$config = $cache->obtain_config();
$filename = $_GET['avatar'];
$filename = request_var('avatar', '');
$avatar_group = false;
$exit = false;