golem
/
twentyGOLEM
9
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Strip ../ in reading. 

git-svn-id: http://svn.automattic.com/wordpress/trunk@1020 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
saxmatt 2004-03-27 17:05:16 +00:00
parent a8b8667730
commit 6589bd70fd
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
wp-admin/templates.php
View File

@ -83,6 +83,7 @@ default:
$file = '.' . $file;
$file = stripslashes($file);
$file = str_replace('../', '', $file);
$file = '../' . $file;
if (!is_file($file))