svn: /web/doc-editor/trunk/php/ ExtJsController.php

yannick                                  Sun, 19 Jun 2011 23:22:27 +0000

Revision: http://svn.php.net/viewvc?view=revision&revision=312317

Log:
Fix security issue - reported by Neal Poole

Changed paths:
    U   web/doc-editor/trunk/php/ExtJsController.php

Modified: web/doc-editor/trunk/php/ExtJsController.php
===================================================================
--- web/doc-editor/trunk/php/ExtJsController.php	2011-06-19 23:11:05 UTC (rev 312316)
+++ web/doc-editor/trunk/php/ExtJsController.php	2011-06-19 23:22:27 UTC (rev 312317)
@@ -700,6 +700,10 @@
             // $skeleton is the ful path of the file
             // It must start with this  : $appConf[$project]['skeletons.folder']

+            if( !isset($appConf[$project]['skeletons.folder']) ) {
+                return false;
+            }
+
             if( substr($skeleton, 0, strlen($appConf[$project]['skeletons.folder']) ) !=  $appConf[$project]['skeletons.folder'] ) {
                 return false;
             }