aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/phpbb/symfony_request.php
diff options
context:
space:
mode:
authorMarc Alexander <admin@m-a-styles.de>2014-06-11 23:34:51 +0200
committerMarc Alexander <admin@m-a-styles.de>2014-06-11 23:34:51 +0200
commit204904441a373db335375e973f78b9e8b2741867 (patch)
tree09e92502855405349c1f422ab8f0994ed5c4d7e3 /phpBB/phpbb/symfony_request.php
parent694f8391c9d3a948159ea2564e6bf4c606eb4053 (diff)
downloadforums-204904441a373db335375e973f78b9e8b2741867.tar
forums-204904441a373db335375e973f78b9e8b2741867.tar.gz
forums-204904441a373db335375e973f78b9e8b2741867.tar.bz2
forums-204904441a373db335375e973f78b9e8b2741867.tar.xz
forums-204904441a373db335375e973f78b9e8b2741867.zip
[ticket/9801] Allow display of page outside board directory on viewonline
Until now, the preg_match didn't take into account that a page might be outside the board directory. After this change, the regular expression will allow preceding dots and slashes. Paths like ../../test.php will be allowed. The page will be unknown in viewonline.php and it will revert to index.php as current page. However, the core.viewonline_overwrite_location event will receive proper info of the page the user is on right now allowing a listener to change the info that is being displayed. PHPBB3-9801
Diffstat (limited to 'phpBB/phpbb/symfony_request.php')
0 files changed, 0 insertions, 0 deletions