From: <ji...@us...> - 2005-11-29 08:39:28
|
Update of /cvsroot/phpicalendar/phpicalendar/functions In directory sc8-pr-cvs1.sourceforge.net:/tmp/cvs-serv19510/phpicalendar/functions Modified Files: init.inc.php Log Message: init.inc.php - remove .. but not . from cpath Index: init.inc.php =================================================================== RCS file: /cvsroot/phpicalendar/phpicalendar/functions/init.inc.php,v retrieving revision 1.79 retrieving revision 1.80 diff -C2 -d -r1.79 -r1.80 *** init.inc.php 29 Nov 2005 08:35:48 -0000 1.79 --- init.inc.php 29 Nov 2005 08:39:20 -0000 1.80 *************** *** 29,37 **** #cpath modifies the calendar path based on the url or cookie values. This allows you to run multiple calendar subsets from a single phpicalendar installation. Operations on cpath are largely hidden from the end user. if($_REQUEST['cpath']){ ! $cpath = str_replace('.','',$_REQUEST['cpath']); $calendar_path .= "/$cpath"; $tmp_dir .= "/$cpath"; }elseif(isset($default_cpath_check)){ ! $cpath = str_replace('.','',$default_cpath_check); $calendar_path .= "/$cpath"; $tmp_dir .= "/$cpath"; --- 29,37 ---- #cpath modifies the calendar path based on the url or cookie values. This allows you to run multiple calendar subsets from a single phpicalendar installation. Operations on cpath are largely hidden from the end user. if($_REQUEST['cpath']){ ! $cpath = str_replace('..','',$_REQUEST['cpath']); $calendar_path .= "/$cpath"; $tmp_dir .= "/$cpath"; }elseif(isset($default_cpath_check)){ ! $cpath = str_replace('..','',$default_cpath_check); $calendar_path .= "/$cpath"; $tmp_dir .= "/$cpath"; |