Changeset 20714 for trunk/plugins/LocalFilesEditor/admin.php

Timestamp:

Feb 12, 2013, 11:19:57 AM (11 years ago)

Author:

plg

Message:

merge r20712 from branch 2.4 to trunk

bug 2844: increase security on LocalFiles Editor, filter on files to edit.

File:

• trunk/plugins/LocalFilesEditor/admin.php (modified) (2 diffs)

trunk/plugins/LocalFilesEditor/admin.php

@@ -56 +56 @@
 if (isset($_POST['restore']))
 {
-  $edited_file = $_POST['edited_file'];
   $content_file = file_get_contents(get_bak_file($edited_file));
   array_push($page['infos'],
@@ -74 +73 @@
   else
   {
-    $edited_file = $_POST['edited_file'];
     $content_file = stripslashes($_POST['text']);
     if (get_extension($edited_file) == 'php')