From 6589bd70fd95165bef5fd55e477b6bc3f8125359 Mon Sep 17 00:00:00 2001
From: saxmatt <saxmatt@1a063a9b-81f0-0310-95a4-ce76da25c4cd>
Date: Sat, 27 Mar 2004 17:05:16 +0000
Subject: [PATCH] Strip ../ in reading.

git-svn-id: http://svn.automattic.com/wordpress/trunk@1020 1a063a9b-81f0-0310-95a4-ce76da25c4cd
---
 wp-admin/templates.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/wp-admin/templates.php b/wp-admin/templates.php
index 41a4ba846..499588b92 100644
--- a/wp-admin/templates.php
+++ b/wp-admin/templates.php
@@ -83,6 +83,7 @@ default:
 		$file = '.' . $file;
 	
 	$file = stripslashes($file);
+	$file = str_replace('../', '', $file);
 	$file = '../' . $file;
 	
 	if (!is_file($file))