Add similar check to the canWrite function.

Signed-off-by: Matthew Dawson <matthew@mjdsystems.ca>
remotes/origin/stable
Matthew Dawson 14 years ago
parent 61ce6e21ec
commit 0f5923a150
  1. 2
      inc/lib_filesystem.php

@ -125,7 +125,7 @@ class OC_FILESYSTEM{
if(substr($path,0,1)!=='/'){
$path='/'.$path;
}
if(strstr($path,'/../')){
if(strstr($path,'/../') || strrchr($path, '/') === '/..' ){
return false;
}
return true;//dummy untill premissions are correctly implemented, also the correcty value because for now users are locked in their seperate data dir and can read/write everything in there

Loading…
Cancel
Save