Matt Pass 24ea1b108f Establish realpath test begins with $docRoot or die ...

No need to str_replace ../, as that isn't real protection, use realpath
instead
Always turn into a real path (we'll only pass relative paths here
anyway), and change \ to / on Windows setups
Only if file exists and begins with the root path do anything, die
otherwise

2014-09-18 10:57:41 +01:00

7.4 KiB

Raw Blame History

View Raw