Appwrite/appwrite
1
0
Fork 0
mirror of https://github.com/appwrite/appwrite.git synced 2026-05-26 13:51:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

adds traversal check to deleteion

Browse Source
This commit is contained in:
Torsten Dittmann
2021-02-05 12:18:12 +01:00
parent f97c87a3e9
commit 078b5360d3
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
app/workers/deletes.php
+3 -2
View File
@@ -314,9 +314,10 @@ class DeletesV1
{
$domain = $document->getAttribute('domain');
$directory = APP_STORAGE_CERTIFICATES . '/' . $domain;
$checkTraversal = realpath($directory) === $directory;
if($domain && is_dir($directory)) {
array_map('unlink', glob("$directory/*.*"));
if($domain && $checkTraversal && is_dir($directory)) {
array_map('unlink', glob($directory.'/*.*'));
rmdir($directory);
Console::info("Deleted certificate files for {$domain}");
} else {