CodeMirror/appwrite
1
0
Fork 0
mirror of synced 2024-06-26 18:20:43 +12:00
Code Issues Projects Releases Wiki Activity

adds traversal check to deleteion

Browse source
This commit is contained in:
Torsten Dittmann 2021-02-05 12:18:12 +01:00
parent f97c87a3e9
commit 078b5360d3
1 changed files with 3 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
app/workers/deletes.php
View file

@ -314,9 +314,10 @@ class DeletesV1
{
$domain = $document->getAttribute('domain');
$directory = APP_STORAGE_CERTIFICATES . '/' . $domain;
$checkTraversal = realpath($directory) === $directory;
if($domain && is_dir($directory)) {
array_map('unlink', glob("$directory/*.*"));
if($domain && $checkTraversal && is_dir($directory)) {
array_map('unlink', glob($directory.'/*.*'));
rmdir($directory);
Console::info("Deleted certificate files for {$domain}");
} else {