KVE-2018-366, 379, 397 취약점 수정
This commit is contained in:
1 parent
a069ec6c93
commit
d7cf0ce39d
6 files changed
+16
-13
No files matched your search
+1
-1
@@ -3478,7 +3478,7 @@ function is_include_path_check($path='', $is_input='')
|
||||
return false;
|
||||
}
|
||||
|
||||
if( preg_match('/\/data\/(file|editor)\/[A-Za-z0-9_]{1,20}\//', $path) ){
|
||||
if( preg_match('/\/data\/(file|editor|qa|cache|member|member_image|session|tmp)\/[A-Za-z0-9_]{1,20}\//i', $path) ){
|
||||
return false;
|
||||
}
|
||||
}
|
||||
|
||||
Reference in new issue
Block a user