|
|
@@ -24,6 +24,10 @@
|
|
|
}
|
|
|
}
|
|
|
} else {
|
|
|
+ $_GET['path'] = str_replace('/..', '', $_GET['path']);
|
|
|
+ $_GET['path'] = str_replace('../', '', $_GET['path']);
|
|
|
+ $_GET['path'] = str_replace('..', '', $_GET['path']);
|
|
|
+
|
|
|
echo "<h2>" . $_GET['path'] . "</h2>";
|
|
|
if(is_dir($_GET['path'])) {
|
|
|
$list = scandir($_GET['path']);
|
