From f57df8e12eab8cc75739bb6bc89fd09337774b93 Mon Sep 17 00:00:00 2001 From: Joas Schilling Date: Mon, 28 Apr 2014 21:14:29 +0200 Subject: [PATCH] [ticket/12273] Also check file for adm "Location:" events PHPBB3-12273 --- phpBB/phpbb/event/md_exporter.php | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/phpBB/phpbb/event/md_exporter.php b/phpBB/phpbb/event/md_exporter.php index b641281a04..a8d9eb1f3c 100644 --- a/phpBB/phpbb/event/md_exporter.php +++ b/phpBB/phpbb/event/md_exporter.php @@ -287,6 +287,11 @@ class md_exporter else if ($this->filter == 'adm') { $file = substr($file_details, strlen('* Location: ')); + if (!file_exists($this->path . $file) || substr($file, -5) !== '.html') + { + throw new \LogicException("Invalid file '{$file}' not found for event '{$this->current_event}'", 1); + } + $files_list['adm'][] = substr($file, strlen('adm/style/')); $this->events_by_file[$file][] = $this->current_event;