Useless XSS fix.

16 years ago · 51e76f4109
parent 6788efa5ce
commit 51e76f4109
1 changed files with 8 additions and 1 deletions
--- a/www/software.php
+++ b/www/software.php
@ -23,11 +23,18 @@ fclose($fp);

 // Get form data, if any...
 if (array_key_exists("FILE", $_GET))
+{
  $file = $_GET["FILE"];
+
+  if (strpos($file, "../") !== FALSE ||
+      !file_exists("/home/ftp.easysw.com/pub/$file"))
+    $file = "";
+}
 else
  $file = "";

-if (array_key_exists("SITE", $_GET))
+if (array_key_exists("SITE", $_GET) &&
+    array_key_exists($_GET["SITE"], $PROJECT_SITELIST))
 {
  $site = $_GET["SITE"];
  setcookie("SITE", $site, time() + 90 * 86400, "/");