From 4ee8f04befa6e23c665fdbef6117dcdf70f7c6b7 Mon Sep 17 00:00:00 2001 From: Andrew Davidson Date: Wed, 8 Apr 2015 10:05:08 +0100 Subject: [PATCH] MDL-49787 email: Updated email attachement path check to use realpath() in order to allow for symlinked temp directories --- lib/moodlelib.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/moodlelib.php b/lib/moodlelib.php index bcd2d4b2f8b..435cdc36cfe 100644 --- a/lib/moodlelib.php +++ b/lib/moodlelib.php @@ -5946,7 +5946,7 @@ function email_to_user($user, $from, $subject, $messagetext, $messagehtml = '', // If the attachment is a full path to a file in the tempdir, use it as is, // otherwise assume it is a relative path from the dataroot (for backwards compatibility reasons). - if (strpos($attachpath, $temppath) !== 0) { + if (strpos($attachpath, realpath($temppath)) !== 0) { $attachmentpath = $CFG->dataroot . '/' . $attachmentpath; }