wbrawner/server
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add checks in opendir() to prevent including the current directory or parent

Browse source
This commit is contained in:
Michael Gapczynski 2011-07-12 18:22:59 -04:00
parent 6b303ee64b
commit b2b7d99302
1 changed files with 6 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
apps/files_sharing/sharedstorage.php
View file

@ -98,10 +98,12 @@ class OC_FILESTORAGE_SHARED extends OC_FILESTORAGE {
$targets[] = basename($item['target']);
}
while (($filename = readdir($dh)) !== false) {
if (!in_array($filename, $sources)) {
$files[] = $filename;
} else {
$files[] = $targets[array_search($filename, $sources)];
if ($filename != "." && $filename != "..") {
if (!in_array($filename, $sources)) {
$files[] = $filename;
} else {
$files[] = $targets[array_search($filename, $sources)];
}
}
}
$FAKEDIRS['shared'] = $files;