From afc18a5da7a0673965dc76ead201e1521b0597eb Mon Sep 17 00:00:00 2001 From: Jim Hu Date: Tue, 29 Nov 2005 08:39:20 +0000 Subject: init.inc.php - remove .. but not . from cpath --- functions/init.inc.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'functions/init.inc.php') diff --git a/functions/init.inc.php b/functions/init.inc.php index 034171f..eb5c261 100644 --- a/functions/init.inc.php +++ b/functions/init.inc.php @@ -28,11 +28,11 @@ if (isset($_COOKIE['phpicalendar'])) { } #cpath modifies the calendar path based on the url or cookie values. This allows you to run multiple calendar subsets from a single phpicalendar installation. Operations on cpath are largely hidden from the end user. if($_REQUEST['cpath']){ - $cpath = str_replace('.','',$_REQUEST['cpath']); + $cpath = str_replace('..','',$_REQUEST['cpath']); $calendar_path .= "/$cpath"; $tmp_dir .= "/$cpath"; }elseif(isset($default_cpath_check)){ - $cpath = str_replace('.','',$default_cpath_check); + $cpath = str_replace('..','',$default_cpath_check); $calendar_path .= "/$cpath"; $tmp_dir .= "/$cpath"; } -- cgit v1.2.3