Mirror/codiad
1
0
Fork 0
mirror of https://github.com/xevidos/codiad.git synced 2024-11-14 07:41:14 +01:00
Code Issues Projects Releases Packages Wiki Activity

Added admin only absolute paths for filesystem protection.

Browse source
This commit is contained in:
xevidos 2019-03-11 10:04:02 -04:00
parent 6f6e2d0fb6
commit ed439142cc
1 changed files with 5 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
components/project/class.project.php
View file

@ -392,6 +392,11 @@ class Project extends Common {
mkdir( WORKSPACE . '/' . $this->path ); mkdir( WORKSPACE . '/' . $this->path );
} else { } else {
if( ! is_admin() ) {
die( formatJSEND( "error", "Absolute Paths are only allowed for admins" ) );
}
if ( defined( 'WHITEPATHS' ) ) { if ( defined( 'WHITEPATHS' ) ) {
$allowed = false; $allowed = false;