From f6c2fa3af06abfd67e1dcd77978a41a47b21f895 Mon Sep 17 00:00:00 2001 From: ftimme <ft@falkotimme.com> Date: Tue, 04 Dec 2012 12:54:04 -0500 Subject: [PATCH] - Changed check if a domain is unique so that vhosts with identical domains/hostnames are allowed on different IPs and/or servers. --- interface/lib/classes/validate_ftpuser.inc.php | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/interface/lib/classes/validate_ftpuser.inc.php b/interface/lib/classes/validate_ftpuser.inc.php index 7e04cb9..0682650 100644 --- a/interface/lib/classes/validate_ftpuser.inc.php +++ b/interface/lib/classes/validate_ftpuser.inc.php @@ -72,6 +72,8 @@ $doc_root .= "/"; if(substr($field_value, 0, strlen($doc_root)) == $doc_root) $is_ok = true; + + if(stristr($field_value,'..') or stristr($field_value,'./') or stristr($field_value,'/.')) $is_ok = false; if($is_ok == false) { $errmsg = $validator['errmsg']; -- Gitblit v1.9.1