lainwir3d/dolibarr
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix securite: Correction d'une faille de scurit sur le wrapper

Browse Source
This commit is contained in:
simontosser 2005-08-25 10:20:13 +00:00
parent bda868be54
commit affe34b9d9
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
htdocs/document.php
View File

@ -39,6 +39,9 @@ $original_file = urldecode($_GET["file"]);
$modulepart = urldecode($_GET["modulepart"]); $modulepart = urldecode($_GET["modulepart"]);
$type = urldecode($_GET["type"]); $type = urldecode($_GET["type"]);
//Suppression de la chaine de caractère ../ dans $original_file
$original_file = str_replace("../","/", "$original_file");
$accessallowed=0; $accessallowed=0;
if ($modulepart) if ($modulepart)
{ {