From 03bca94981b46d3b7e1251d11a91f7aeaef2143e Mon Sep 17 00:00:00 2001 From: tbrehm <t.brehm@ispconfig.org> Date: Wed, 12 Jan 2011 09:43:14 -0500 Subject: [PATCH] Merged revisions 2173-2174 from stable branch. --- interface/lib/classes/validate_ftpuser.inc.php | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/interface/lib/classes/validate_ftpuser.inc.php b/interface/lib/classes/validate_ftpuser.inc.php index 7e04cb9..0682650 100644 --- a/interface/lib/classes/validate_ftpuser.inc.php +++ b/interface/lib/classes/validate_ftpuser.inc.php @@ -72,6 +72,8 @@ $doc_root .= "/"; if(substr($field_value, 0, strlen($doc_root)) == $doc_root) $is_ok = true; + + if(stristr($field_value,'..') or stristr($field_value,'./') or stristr($field_value,'/.')) $is_ok = false; if($is_ok == false) { $errmsg = $validator['errmsg']; -- Gitblit v1.9.1