EuskadiTech/Axia4
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update filename sanitization method

Browse Source 
Sanitize the filename by removing path information.
This commit is contained in:
Naiel
2026-02-21 21:57:14 +01:00
committed by GitHub
parent fd3576674c
commit 4e9c9bcf96
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
public_html/_incl/tools.security.php
View File

@@ -10,7 +10,7 @@ function Sf($filename) {
* @return string The sanitized filename. * @return string The sanitized filename.
*/ */
// Remove any path information and null bytes // Remove any path information and null bytes
$filename = realpath($filename); $filename = basename($filename);
if ($filename === false) { if ($filename === false) {
$filename = ""; $filename = "";
} }