From 7662d02939fb3cf6f0d9ec32ac664401dcfe7490 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Michal=20=C4=8Ciha=C5=99?= Date: Thu, 21 Jun 2018 12:25:53 +0200 Subject: Avoid looking for ? when checking for file to be included MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Michal Čihař --- index.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'index.php') diff --git a/index.php b/index.php index cc492e77ee..0ac91de52f 100644 --- a/index.php +++ b/index.php @@ -56,7 +56,7 @@ if (! empty($_REQUEST['target']) && is_string($_REQUEST['target']) && ! preg_match('/^index/', $_REQUEST['target']) && ! in_array($_REQUEST['target'], $target_blacklist) - && Core::checkPageValidity($_REQUEST['target']) + && Core::checkPageValidity($_REQUEST['target'], [], true) ) { include $_REQUEST['target']; exit; -- cgit v1.2.3