From fab45e0566ddc14b74edfbc13c9d6acf261bea44 Mon Sep 17 00:00:00 2001 From: cfoe <cfoe@ispconfig3> Date: Fri, 06 Jul 2012 08:07:32 -0400 Subject: [PATCH] init for default-v2 --- interface/web/sites/ftp_user_edit.php | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/interface/web/sites/ftp_user_edit.php b/interface/web/sites/ftp_user_edit.php index daae650..2e8d4a7 100644 --- a/interface/web/sites/ftp_user_edit.php +++ b/interface/web/sites/ftp_user_edit.php @@ -106,6 +106,8 @@ if(isset($this->dataRecord['username']) && trim($this->dataRecord['username']) == '') $app->tform->errorMessage .= $app->tform->lng('username_error_empty').'<br />'; if(isset($this->dataRecord['username']) && empty($this->dataRecord['parent_domain_id'])) $app->tform->errorMessage .= $app->tform->lng('parent_domain_id_error_empty').'<br />'; + if(isset($this->dataRecord['dir']) && stristr($this->dataRecord['dir'],'..')) $app->tform->errorMessage .= $app->tform->lng('dir_dot_error').'<br />'; + if(isset($this->dataRecord['dir']) && stristr($this->dataRecord['dir'],'./')) $app->tform->errorMessage .= $app->tform->lng('dir_slashdot_error').'<br />'; parent::onSubmit(); } -- Gitblit v1.9.1