Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/nextcloud/server.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorMorris Jobke <hey@morrisjobke.de>2016-07-04 13:24:10 +0300
committerGitHub <noreply@github.com>2016-07-04 13:24:10 +0300
commit01f6f2634326e9643a53d3a16c361ed425bb526f (patch)
treec4fc722401a28cb01325546eccdd2fa48bfcd5fd
parentdd8af5c36d026ca5f0d205f09846a686ae9cc755 (diff)
parent717b480a2e50e43f6f51159d2e680219c2bf4acf (diff)
Merge pull request #304 from nextcloud/versions-fix
add additional check if we have a valid uid and filename
-rw-r--r--apps/files_versions/lib/storage.php4
1 files changed, 4 insertions, 0 deletions
diff --git a/apps/files_versions/lib/storage.php b/apps/files_versions/lib/storage.php
index cf99f62b832..d8fd9bfc316 100644
--- a/apps/files_versions/lib/storage.php
+++ b/apps/files_versions/lib/storage.php
@@ -321,6 +321,10 @@ class Storage {
// add expected leading slash
$file = '/' . ltrim($file, '/');
list($uid, $filename) = self::getUidAndFilename($file);
+ if ($uid === null || trim($filename, '/') === '') {
+ return false;
+ }
+
$users_view = new View('/'.$uid);
$files_view = new View('/'. User::getUser().'/files');
$versionCreated = false;