Project

General

Profile

Bug #19066 ยป showpic.php.patch

Administrator Admin, 2008-07-06 13:45

View differences:

typo3/sysext/cms/tslib/showpic.php (working copy)
// ***********************
// If no file-param is given, we must exit
if (!$this->file) {
header("HTTP/1.0 404 Not Found");
die('Parameter Error: No file given.');
}
......
$GLOBALS['TYPO3_CONF_VARS']['SYS']['encryptionKey'].'|');
if ($md5_value!=$this->md5) {
header("HTTP/1.0 404 Not Found");
die('Parameter Error: Wrong parameters sent.');
}
......
$test_file=PATH_site.$this->file;
if (!t3lib_div::validPathStr($test_file)) {
header("HTTP/1.0 404 Not Found");
die('Parameter Error: No valid filepath');
}
if (!@is_file($test_file)) {
header("HTTP/1.0 404 Not Found");
die('The given file was not found');
}
}
......
$SOBE->init();
$SOBE->main();
$SOBE->printContent();
?>
?>
    (1-1/1)