Mirror/codiad
1
0
Fork 0
mirror of https://github.com/xevidos/codiad.git synced 2024-11-10 21:26:35 +01:00
Code Issues Packages Projects Releases Wiki Activity

Added admin only absolute paths for filesystem protection.

Browse Source
This commit is contained in:
xevidos 2019-03-11 10:04:02 -04:00
parent 6f6e2d0fb6
commit ed439142cc
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
components/project/class.project.php
View File

@ -392,6 +392,11 @@ class Project extends Common {
mkdir( WORKSPACE . '/' . $this->path );
} else {
if( ! is_admin() ) {
die( formatJSEND( "error", "Absolute Paths are only allowed for admins" ) );
}
if ( defined( 'WHITEPATHS' ) ) {
$allowed = false;