Update file_save.php
This commit is contained in:
@@ -116,7 +116,7 @@
|
|||||||
$path_prefix = substr($path_array['dirname'], 0, strlen($edit_directory));
|
$path_prefix = substr($path_array['dirname'], 0, strlen($edit_directory));
|
||||||
|
|
||||||
//validate the path
|
//validate the path
|
||||||
if ($path_prefix == $edit_directory) {
|
if (realpath($path_prefix) == realpath($edit_directory)) {
|
||||||
if ($file_path != '') {
|
if ($file_path != '') {
|
||||||
try {
|
try {
|
||||||
//save file content
|
//save file content
|
||||||
|
|||||||
Reference in New Issue
Block a user