BlackCatDevelopment / BlackCatCMS

BlackCat CMS is a PHP5, HTML5 content management system
https://blackcat-cms.org
Other
11 stars 9 forks source link

Extend Directory helper and / or Validate helper to check paths #310

Closed webbird closed 6 years ago

webbird commented 9 years ago

See also #309

I think we should extend the helpers to only allow paths below CAT_PATH, maybe sending a warning (mail) to the admin if a path traversal attempt is encountered.

webbird commented 9 years ago

While I think this should be done, I postpone it to a later version, as it may have unexpected side effects.

webbird commented 6 years ago

Complete rework in progress for BC2.