[TYPO3-core] RFC: allow .. in names -> check for ../ (#3364)

rupert germann rupi at gmx.li
Sun Apr 30 23:22:26 CEST 2006


On Friday 28 April 2006 21:24, Martin Kutschker wrote:
> Hi!
>
> Branches: HEAD / TYPO3_4-0
>
> Problem:
> It seems that t3lib_div::validPathStr() is to eager in denying paths. While
> it's possible to add a file with two dots in it, deleting (probably among
> other things) fails.
>
> Solution:
> Check for ../ instead of ..

works fine for me.
+1

greets
rupert
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.netfielders.de/pipermail/typo3-team-core/attachments/20060430/89295879/attachment.pgp 


More information about the TYPO3-team-core mailing list