From ec0dbd24cde924892b225fead4649b39dbbb4878 Mon Sep 17 00:00:00 2001 From: fche Date: Wed, 19 Nov 2008 18:36:06 +0000 Subject: [PATCH] none --- examples/gitweb.php | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/examples/gitweb.php b/examples/gitweb.php index ae02e540..3392c15f 100644 --- a/examples/gitweb.php +++ b/examples/gitweb.php @@ -2,9 +2,9 @@ $uri = $_SERVER["REQUEST_URI"]; $gitfile0 = ereg_replace (".*/examples/", "", $uri); if ($gitfile0 == "") { $gitfile0 = "index.html"; } -#if (! preg_match ("/^[/_A-Za-z0-9.]*$/", $gitfile0)) { -# die ("bad chars ".htmlspecialchars($gitfile0)); -#} +if (escapeshellarg($gitfile0) != $gitfile0) + die ("bad chars? ".htmlspecialchars($gitfile0)); +} $gitfile1 = "testsuite/systemtap.examples/$gitfile0"; $pathparts = pathinfo($gitfile1); switch ($pathparts['extension']) { -- 2.43.5