Skip to content

GitLab

Commit 6d10d309 authored by Lionel VEST's avatar Lionel VEST
Browse files

*

parent 135b8b99
Hide whitespace changes
Inline Side-by-side
Showing with 2 additions and 2 deletions
resources/files.php
View file @ 6d10d309
......@@ -14,10 +14,10 @@ function read($connection,$input)
}
else if ($input->body->action == 'convert_to_zip')
{
$path = '/srv/files/'. $input->db . str_replace('/files/'. $input->db, '', $input->body->path);
if (!isset($input->body->path)) return array("code" => 400, "message" => "Aucun chemin n'a été spécifié");
$path = '/srv/files/'. $input->db . str_replace('/files/'. $input->db, '', $input->body->path);
if (strpos($input->body->path,'/..')) return array("code" => 400, "message" => "Le chemin fourni est invalide");
if (!isdir($path)) return array("code" => 400, "message" => "Le chemin spécifié n'existe pas");
if (!is_dir($path)) return array("code" => 400, "message" => "Le chemin spécifié n'existe pas");
if (!isset($input->body->items)) return array("code" => 400, "message" => "Aucun fichier ou dossier à compresser n'a été spécifié");
foreach ($input->body->items as $item)
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment