Fixes delete personal file in documents see #7457

11 years ago · 533b038501
parent e3ecc3f2d4
commit 533b038501
1 changed files with 2 additions and 0 deletions
--- a/main/document/document.php
+++ b/main/document/document.php
@ -180,6 +180,8 @@ if (Portfolio::controller()->accept()) {
    Portfolio::controller()->run();
 }

+$curdirpath = isset($_GET['curdirpath']) ? Security::remove_XSS($_GET['curdirpath']) : null;
+
 switch ($action) {
    case 'delete_item':
        if ($is_allowed_to_edit ||