10h30/ultimatemember
1
0
Fork 0
mirror of https://github.com/10h30/ultimatemember.git synced 2026-07-18 22:23:37 +09:00
Code Issues Packages Projects Releases Wiki Activity

- fixed vulnerabilities;

Browse Source 
- small changes and fixes;
This commit is contained in:
nikitozzzzzzz
2017-08-07 16:30:12 +03:00
parent 2b21ebbc7c
commit c4b6484438
18 changed files with 59 additions and 26 deletions
Download Patch File Download Diff File Expand all files Collapse all files
includes/um-short-functions.php
+10 -5
View File
@@ -567,17 +567,22 @@
*** @Check that temp upload is valid
***/
function um_is_temp_upload( $url ) {
$url = explode('/ultimatemember/temp/', $url);
$url = realpath( $url );
if ( ! $url )
return false;
$url = explode( '/ultimatemember/temp/', $url );
if ( isset( $url[1] ) ) {
if ( strstr( $url[1], '../' ) || strstr( $url[1], '%' ) ) {
if ( strstr( $url[1], '../' ) || strstr( $url[1], '%' ) )
return false;
}
$src = UM()->files()->upload_temp . $url[1];
if ( !file_exists( $src ) ) {
if ( ! file_exists( $src ) )
return false;
}
return $src;
}
return false;