From 3c53e35464f1cdd5c40717eb2b7e85f999a80eca Mon Sep 17 00:00:00 2001 From: tbrehm <t.brehm@ispconfig.org> Date: Mon, 21 May 2012 09:55:08 -0400 Subject: [PATCH] Changed file encoding to utf8 --- interface/lib/classes/validate_ftpuser.inc.php | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/interface/lib/classes/validate_ftpuser.inc.php b/interface/lib/classes/validate_ftpuser.inc.php index 7e04cb9..0682650 100644 --- a/interface/lib/classes/validate_ftpuser.inc.php +++ b/interface/lib/classes/validate_ftpuser.inc.php @@ -72,6 +72,8 @@ $doc_root .= "/"; if(substr($field_value, 0, strlen($doc_root)) == $doc_root) $is_ok = true; + + if(stristr($field_value,'..') or stristr($field_value,'./') or stristr($field_value,'/.')) $is_ok = false; if($is_ok == false) { $errmsg = $validator['errmsg']; -- Gitblit v1.9.1