diff options
| author | Jim Hu <jimhu@users.sourceforge.net> | 2005-11-29 08:39:20 +0000 |
|---|---|---|
| committer | Jim Hu <jimhu@users.sourceforge.net> | 2005-11-29 08:39:20 +0000 |
| commit | afc18a5da7a0673965dc76ead201e1521b0597eb (patch) | |
| tree | 628c307fc3dd719122f982515b35fa333daa5e57 /functions/init.inc.php | |
| parent | 9ac55e3b0c986411f19b9ca3aa99a087e2562b6b (diff) | |
| download | phpicalendar-afc18a5da7a0673965dc76ead201e1521b0597eb.tar.gz phpicalendar-afc18a5da7a0673965dc76ead201e1521b0597eb.tar.bz2 phpicalendar-afc18a5da7a0673965dc76ead201e1521b0597eb.zip | |
init.inc.php - remove .. but not . from cpath
Diffstat (limited to 'functions/init.inc.php')
| -rw-r--r-- | functions/init.inc.php | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/functions/init.inc.php b/functions/init.inc.php index 034171f..eb5c261 100644 --- a/functions/init.inc.php +++ b/functions/init.inc.php @@ -28,11 +28,11 @@ if (isset($_COOKIE['phpicalendar'])) { } #cpath modifies the calendar path based on the url or cookie values. This allows you to run multiple calendar subsets from a single phpicalendar installation. Operations on cpath are largely hidden from the end user. if($_REQUEST['cpath']){ - $cpath = str_replace('.','',$_REQUEST['cpath']); + $cpath = str_replace('..','',$_REQUEST['cpath']); $calendar_path .= "/$cpath"; $tmp_dir .= "/$cpath"; }elseif(isset($default_cpath_check)){ - $cpath = str_replace('.','',$default_cpath_check); + $cpath = str_replace('..','',$default_cpath_check); $calendar_path .= "/$cpath"; $tmp_dir .= "/$cpath"; } |