Strip ../ in reading.
git-svn-id: https://develop.svn.wordpress.org/trunk@1020 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
parent
5a37c37d10
commit
0864452ab6
@ -83,6 +83,7 @@ default:
|
||||
$file = '.' . $file;
|
||||
|
||||
$file = stripslashes($file);
|
||||
$file = str_replace('../', '', $file);
|
||||
$file = '../' . $file;
|
||||
|
||||
if (!is_file($file))
|
||||
|
Loading…
Reference in New Issue
Block a user