sergiotarxz/Wordpress
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Force a trailing slash on BLOGUPLOADDIR in ms-files.php. props wonderboymusic, see #18592.

Browse Source 
git-svn-id: https://develop.svn.wordpress.org/trunk@18638 602fd350-edb4-49c9-b593-d223f7449a82
This commit is contained in:
Andrew Nacin 2011-09-05 16:55:05 +00:00
parent 78b5130751
commit 6fa5b1ed74
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
wp-includes/ms-files.php
View File

@ -23,7 +23,7 @@ if ( $current_blog->archived == '1' || $current_blog->spam == '1' || $current_bl
die( '404 — File not found.' );
}
$file = BLOGUPLOADDIR . str_replace( '..', '', $_GET[ 'file' ] );
$file = trailingslashit( BLOGUPLOADDIR ) . str_replace( '..', '', $_GET[ 'file' ] );
if ( !is_file( $file ) ) {
status_header( 404 );
die( '404 — File not found.' );