From ab5c4774bb1772299ceb87a67289a0db61d61d61 Mon Sep 17 00:00:00 2001
From: Yannick Warnier <yannick.warnier@beeznest.com>
Date: Mon, 19 Feb 2007 23:25:57 +0100
Subject: [PATCH] [svn r11147] Added filter on downloaded file (closing bug
 #1150) http://projects.dokeos.com/?do=details&id=1150

---
 .../fckeditor/editor/plugins/Attachment/download.php  | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/main/inc/lib/fckeditor/editor/plugins/Attachment/download.php b/main/inc/lib/fckeditor/editor/plugins/Attachment/download.php
index 3a66608fb8..00436a08d4 100644
--- a/main/inc/lib/fckeditor/editor/plugins/Attachment/download.php
+++ b/main/inc/lib/fckeditor/editor/plugins/Attachment/download.php
@@ -1,6 +1,17 @@
 <?php
+require_once('../../../../../global.inc.php');
+require_once('../../../../security.lib.php');
+
 $filename = urldecode(stripslashes($_GET['file']));
 
+//prevent download of something outside of the course dir
+$course_dir   = $_course['path']."/document";
+$course_path = api_get_path(SYS_COURSE_PATH).$course_dir;
+$in_course = Security::check_abs_path($filename,$course_path);
+if(!$in_course){
+	$filename = "";
+}
+
 // required for IE, otherwise Content-disposition is ignored
 if(ini_get('zlib.output_compression'))
   ini_set('zlib.output_compression', 'Off');