mirror of
https://github.com/icecoder/ICEcoder.git
synced 2026-03-07 00:56:48 +01:00
File/folder message instead and go back
This commit is contained in:
@@ -39,7 +39,7 @@ for ($i=0; $i<count($allFiles); $i++) {
|
||||
($_GET['action']!="getRemoteFile" && strpos(realpath($allFiles[$i]),realpath($docRoot)) !== 0) ||
|
||||
($_GET['action']=="getRemoteFile" && strpos($allFiles[$i],"http") !== 0)
|
||||
) {
|
||||
die("alert('Sorry - problem with file requested');</script>");
|
||||
die("alert('Sorry - problem with file/folder requested');window.history.back();</script>");
|
||||
};
|
||||
}
|
||||
|
||||
|
||||
@@ -7,7 +7,7 @@ $t = $text['properties'];
|
||||
$fileName=realpath($docRoot.$iceRoot.str_replace("|","/",strClean($_GET['fileName'])));
|
||||
// If it doesn't exist, or doesn't start with the $docRoot, stop here
|
||||
if (!file_exists($fileName) || strpos(str_replace("\\","/",$fileName),$docRoot) !== 0) {
|
||||
die("<script>alert('Sorry, that file/folder doesn\'t appear to exist');</script>");
|
||||
die("<script>alert('Sorry - problem with file/folder requested');window.history.back();</script>");
|
||||
}
|
||||
?>
|
||||
<!DOCTYPE html>
|
||||
|
||||
Reference in New Issue
Block a user