From: rabuzarus <> Date: Mon, 23 Oct 2017 20:14:35 +0000 (+0200) Subject: frio: sanitise $schema X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=2687a42e3cbf17b169da3d624c1b2d68d68678ca;p=friendica.git frio: sanitise $schema --- diff --git a/view/theme/frio/style.php b/view/theme/frio/style.php index 7b1b8a350d..c227c354f8 100644 --- a/view/theme/frio/style.php +++ b/view/theme/frio/style.php @@ -60,6 +60,9 @@ if (! $a->install) { if ($_REQUEST['schema']) { $schema = $_REQUEST['schema']; } + +$schema = basename($schema); + if (($schema) && ($schema != '---')) { if (file_exists('view/theme/frio/schema/' . $schema . '.php')) { $schemefile = 'view/theme/frio/schema/' . $schema . '.php';