Strip ../ in reading.

git-svn-id: http://svn.automattic.com/wordpress/trunk@1020 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2004-03-27 17:05:16 +00:00 · 2004-03-27 17:05:16 +00:00 · 6589bd70fd
parent a8b8667730
commit 6589bd70fd
1 changed files with 1 additions and 0 deletions
--- a/wp-admin/templates.php
+++ b/wp-admin/templates.php
@ -83,6 +83,7 @@ default:
 		$file = '.' . $file;
 	
 	$file = stripslashes($file);
+	$file = str_replace('../', '', $file);
 	$file = '../' . $file;
 	
 	if (!is_file($file))