include path 체크함수 수정

2017-07-06 10:27:45 +09:00
parent bab7fa1f39
commit 3000fc0b35
1 changed files with 4 additions and 3 deletions
--- a/lib/common.lib.php
+++ b/lib/common.lib.php
@ -3320,11 +3320,12 @@ function is_include_path_check($path='')
            //echo 'Caught exception: ',  $e->getMessage(), "\n";
            return false;
        }
+
+        if( preg_match('/\/data\/(file|editor)\/[A-Za-z0-9_]{1,20}\//', $path) ){
+            return false;
+        }
    }

-    if( !$path || preg_match('/\/data\/(file|editor)\/[A-Za-z0-9_]{1,20}\//', $path) ){
-        return false;
-    }
    return true;
 }
 ?>