fix securite: Correction d'une faille de s�curit� sur le wrapper

2005-08-25 10:20:13 +00:00 · 2005-08-25 10:20:13 +00:00 · affe34b9d9
commit affe34b9d9
parent bda868be54
1 changed files with 3 additions and 0 deletions
--- a/htdocs/document.php
+++ b/htdocs/document.php
@ -39,6 +39,9 @@ $original_file = urldecode($_GET["file"]);
 $modulepart = urldecode($_GET["modulepart"]);
 $type = urldecode($_GET["type"]);

+//Suppression de la chaine de caractère ../ dans $original_file
+$original_file = str_replace("../","/", "$original_file");
+
 $accessallowed=0;
 if ($modulepart)
 {