Dotclear


Ignore:
Timestamp:
07/12/16 08:29:10 (9 years ago)
Author:
franck <carnet.franck.paul@…>
Branch:
default
Message:

Prevents .htaccess upload, thanks wiswat for reporting this.

File:
1 edited

Legend:

Unmodified
Added
Removed
  • inc/dbschema/upgrade.php

    r3261 r3267  
    552552                    @file_put_contents($f,'Require all denied'."\n".'Deny from all'."\n"); 
    553553               } 
     554 
     555               # Update flie exclusion upload regex 
     556               $strReq = 'UPDATE '.$core->prefix.'setting '. 
     557                         " SET setting_value = '/\\.(phps?|pht(ml)?|phl|s?html?|js|htaccess)[0-9]*\$/i' ". 
     558                         " WHERE setting_id = 'media_exclusion' ". 
     559                         " AND setting_ns = 'system' ". 
     560                         " AND (setting_value = '/\\.php[0-9]*\$/i' ". 
     561                         "   OR setting_value = '/\\.php\$/i') ". 
     562                         "    OR setting_value = '/\\.(phps?|pht(ml)?|phl)[0-9]*\$/i' ". 
     563                         "    OR setting_value = '/\\.(phps?|pht(ml)?|phl|s?html?|js)[0-9]*\$/i'"; 
     564               $core->con->execute($strReq); 
    554565          } 
    555566 
Note: See TracChangeset for help on using the changeset viewer.

Sites map