improved path handling for special characters

This commit is contained in:
Garvin Hicking 2012-05-22 12:15:06 +02:00
parent 0ed6481a8a
commit 6af709290c
2 changed files with 3 additions and 2 deletions

View file

@ -0,0 +1 @@
0.6: Add escpaing of path, thanks to Stefan Schurtz (not really 'exploitable', but not nice also)

View file

@ -31,7 +31,7 @@ class serendipity_event_fckeditor extends serendipity_event
$propbag->add('description', PLUGIN_EVENT_FCKEDITOR_DESC);
$propbag->add('stackable', false);
$propbag->add('author', 'Ziyad Saeed, Garvin Hicking');
$propbag->add('version', '0.5');
$propbag->add('version', '0.6');
$propbag->add('requirements', array(
'serendipity' => '0.9',
'smarty' => '2.6.7',
@ -82,7 +82,7 @@ class serendipity_event_fckeditor extends serendipity_event
break;
case 'backend_wysiwyg_finish':
$path = $this->get_config('path');
$path = htmlspecialchars($this->get_config('path'));
if ($this->init) {
return true;
}