mirror of
https://github.com/moodle/moodle.git
synced 2025-04-21 08:22:07 +02:00
af9a7937cc
The result from this function is used in send_file calls and if unclean (windows dir separators, or .. path components) it could expose sensitive files (e.g. .php files). Now we always clean the result from this function even if it means double cleaning. I also fixed the unit test for this function and added a new test for this cleaning. I also updated the comments to point to get_file_argument as the full version of min_get_slash_argument.
QUICK INSTALL ============= For the impatient, here is a basic outline of the installation process, which normally takes me only a few minutes: 1) Move the Moodle files into your web directory. 2) Create a single database for Moodle to store all its tables in (or choose an existing database). 3) Visit your Moodle site with a browser, you should be taken to the install.php script, which will lead you through creating a config.php file and then setting up Moodle, creating an admin account etc. 4) Set up a cron task to call the file admin/cron.php every five minutes or so. For more information, see the INSTALL DOCUMENTATION: http://docs.moodle.org/en/Installing_Moodle Good luck and have fun! Martin Dougiamas, Lead Developer