Checkig pathnames for security

2004-09-29 07:01:33 +00:00
parent e40bd2e541
commit e30102faed
1 changed files with 3 additions and 1 deletions
@@ -84,8 +84,10 @@

 /// Open the selected quiz report and display it

+    $mode = clean_filename($mode);
+
    if (! is_readable("report/$mode/report.php")) {
-        error("Report not known ($mode)");
+        error("Report not known (".clean_text($mode).")");
    }

    include("report/default.php");  // Parent class