[svn r12283] Fixed security info disclosure bug http://projects.dokeos.com/?do=details&id=1436

18 years ago · f78b04eaa5
parent aae5fb0ce6
commit f78b04eaa5
1 changed files with 1 additions and 1 deletions
--- a/main/upload/upload.document.php
+++ b/main/upload/upload.document.php
@ -16,7 +16,7 @@
 */

 //many useful functions in main_api.lib.php, by default included
-
+if(!function_exists('api_get_path')){header('location: upload.php');die;}
 require_once(api_get_path(LIBRARY_PATH) . 'fileUpload.lib.php');
 require_once(api_get_path(LIBRARY_PATH) . 'events.lib.inc.php');
 require_once(api_get_path(LIBRARY_PATH) . 'document.lib.php');