prevent basepath from starting or ending with slah

again close #355
vincent-peugnet · Nov 6, 2023 · 6baffed · 6baffed
1 parent 5dfdb0e
commit 6baffed
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/app/class/Config.php b/app/class/Config.php
@@ -119,6 +119,9 @@ public static function tojson()
      */
     public static function checkbasepath(): bool
     {
+        if (str_starts_with(self::$basepath, '/') || str_ends_with(self::$basepath, '/')) {
+            return false;
+        }
         $path = $_SERVER['DOCUMENT_ROOT'] . '/' . self::$basepath . '/' .  Model::CONFIG_FILE;
         return (file_exists($path));
     }