mirror of
git://develop.git.wordpress.org/
synced 2025-01-19 13:47:02 +01:00
Strip ../ in reading.
git-svn-id: https://develop.svn.wordpress.org/trunk@1020 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
parent
5a37c37d10
commit
0864452ab6
@ -83,6 +83,7 @@ default:
|
||||
$file = '.' . $file;
|
||||
|
||||
$file = stripslashes($file);
|
||||
$file = str_replace('../', '', $file);
|
||||
$file = '../' . $file;
|
||||
|
||||
if (!is_file($file))
|
||||
|
Loading…
x
Reference in New Issue
Block a user