From 86fb3c83db00070676ece15706dddb14597fd6fa Mon Sep 17 00:00:00 2001 From: moodler Date: Sun, 12 Dec 2004 07:08:09 +0000 Subject: [PATCH] Added fix from SC22 to check arguments better. --- mod/quiz/quizfile.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/mod/quiz/quizfile.php b/mod/quiz/quizfile.php index a4ea748d86d..172c04c09f1 100644 --- a/mod/quiz/quizfile.php +++ b/mod/quiz/quizfile.php @@ -41,6 +41,9 @@ if (! ($filename = $regs[5])) { error("No valid file name supplied"); } + if (detect_munged_arguments($relativefilepath)) { + error("Errors in the supplied file path"); + } ////////////////////////////////////////// // Info from $pathinfo is now extracted!