Project

General

Profile

Bug #24330 » 16733_avoid_indexed_by_searchengine_4.4.5.diff

Administrator Admin, 2010-12-17 14:31

View differences:

typo3_src-4.4.5/typo3/sysext/cms/tslib/showpic.php 2010-12-17 14:25:13.000000000 +0100
// ***********************
// If no file-param is given, we must exit
if (!$this->file) {
header('HTTP/1.1 400 Bad Request');
die('Parameter Error: No file given.');
}
......
);
if ($md5_value!=$this->md5) {
header('HTTP/1.1 400 Bad Request');
die('Parameter Error: Wrong parameters sent.');
}
......
$test_file=PATH_site.$this->file;
if (!t3lib_div::validPathStr($test_file)) {
header('HTTP/1.1 400 Bad Request');
die('Parameter Error: No valid filepath');
}
if (!@is_file($test_file)) {
header('HTTP/1.1 404 Not Found');
die('The given file was not found');
}
}
(2-2/2)