Changeset 6520

Timestamp:

12/29/07 03:14:33 (6 months ago)

Author:

ryan

Message:

Extra traversal check.

Files:

• trunk/wp-admin/includes/file.php (modified) (1 diff)

trunk/wp-admin/includes/file.php

@@ -44 +44 @@
-
-function validate_file( $file, $allowed_files = '' ) {
+    if ( false !== strpos( $file, '..' ))
+        return 1;
+
-    if ( false !== strpos( $file, './' ))
-        return 1;