Update file_save.php

This commit is contained in:
FusionPBX 2019-08-21 05:28:07 -06:00 committed by GitHub
parent 93408a2c42
commit 93a3d5e6ac
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 1 additions and 1 deletions

View File

@ -116,7 +116,7 @@
$path_prefix = substr($path_array['dirname'], 0, strlen($edit_directory));
//validate the path
if ($path_prefix == $edit_directory) {
if (realpath($path_prefix) == realpath($edit_directory)) {
if ($file_path != '') {
try {
//save file content