Thanks :) But there are several shared hosts that don't allow realpath()
execution (for "security reasons" -.-), are we gonna support them..?
Florian
Am 07.05.2012 13:25, schrieb Georg Ehrke:
It's fixed
(https://gitorious.org/owncloud/owncloud/commit/d032345191c57294d5723639f777692c85bd2b1a)
It seems like there has been ******* merge conflicts which caused this fail. (I
actually fixed this earlier)
It should now return a 404.
Cheers,
Georg
Am 07.05.2012 um 13:12 schrieb Florian Hülsmann:
/owncloud/?app=files&getfile=/../../data/bestfriend/files/hack.php
I don't think I have to be more specific.
Florian
--
Florian Hülsmann
<[email protected]>
http://cbix.de
_______________________________________________
Owncloud mailing list
[email protected]
https://mail.kde.org/mailman/listinfo/owncloud
--
Florian Hülsmann
<[email protected]>
http://cbix.de
_______________________________________________
Owncloud mailing list
[email protected]
https://mail.kde.org/mailman/listinfo/owncloud
