mirror of
https://github.com/phpbb/phpbb.git
synced 2025-07-30 21:40:43 +02:00
[ticket/12099] Clean some paths before using them
PHPBB3-12099
This commit is contained in:
@@ -98,7 +98,7 @@ class path_helper
|
||||
{
|
||||
$path = substr($path, strlen($this->phpbb_root_path));
|
||||
|
||||
return $this->get_web_root_path() . $path;
|
||||
return $this->filesystem->clean_path($this->get_web_root_path() . $path);
|
||||
}
|
||||
|
||||
return $path;
|
||||
@@ -158,7 +158,7 @@ class path_helper
|
||||
*/
|
||||
if ($path_info === '/' && preg_match('/app\.' . $this->php_ext . '\/$/', $request_uri))
|
||||
{
|
||||
return $this->web_root_path = $this->phpbb_root_path . '../';
|
||||
return $this->web_root_path = $this->filesystem->clean_path('../' . $this->phpbb_root_path);
|
||||
}
|
||||
|
||||
/*
|
||||
|
Reference in New Issue
Block a user