fixes #179, preventing path traversal

2022-12-25 15:00:06 +01:00 · 2022-12-25 15:00:06 +01:00 · 5d5c7f6d8f
commit 5d5c7f6d8f
parent 3cc223dec5
1 changed files with 2 additions and 0 deletions
--- a/fp-plugins/mediamanager/panels/panel.mediamanager.file.php
+++ b/fp-plugins/mediamanager/panels/panel.mediamanager.file.php
@ -77,6 +77,8 @@ class admin_uploader_mediamanager extends AdminPanelAction {
 		/* delete file */
 		if (isset($_GET ['deletefile'])) {
 			list ($type, $name) = explode("-", $_GET ['deletefile'], 2);
+			// prevent path traversal: remove ".." and "/" resp. "\"
+			$name = preg_replace('(\.\.|\/|\\\\)', '', $name);
 			switch ($type) {
 				case 'attachs':
 					$type = ABS_PATH . ATTACHS_DIR;