r31k/bludit
2
0
Fork 0
Code Issues 1 Pull Requests Releases Wiki Activity

Add pathFile Sanitization

Browse Source
This commit is contained in:
SamBrishes 2018-12-31 14:03:24 +01:00
parent a1f6e698f2
commit 2e30c596f4
2 changed files with 13 additions and 7 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
bl-kernel/abstract/plugin.class.php
View File

@ -55,13 +55,16 @@ class Plugin {
// --- Metadata --- // --- Metadata ---
$this->filenameMetadata = PATH_PLUGINS.$this->directoryName().DS.'metadata.json'; $this->filenameMetadata = PATH_PLUGINS.$this->directoryName().DS.'metadata.json';
$metadataString = file_get_contents($this->filenameMetadata);
$this->metadata = json_decode($metadataString, true);
// If the plugin is installed then get the database if( Sanitize::pathFile($this->filenameMetadata) ) {
if ($this->installed()) { $metadataString = file_get_contents($this->filenameMetadata);
$Tmp = new dbJSON($this->filenameDb); $this->metadata = json_decode($metadataString, true);
$this->db = $Tmp->db;
// If the plugin is installed then get the database
if ($this->installed()) {
$Tmp = new dbJSON($this->filenameDb);
$this->db = $Tmp->db;
}
} }
} }
@ -324,4 +327,4 @@ class Plugin {
return true; return true;
} }
} }

3
bl-kernel/boot/rules/60.plugins.php
View File

@ -78,6 +78,9 @@ function buildPlugins()
$languageFilename = PATH_PLUGINS.$Plugin->directoryName().DS.'languages'.DS.$site->language().'.json'; $languageFilename = PATH_PLUGINS.$Plugin->directoryName().DS.'languages'.DS.$site->language().'.json';
if( !Sanitize::pathFile($languageFilename) ) { if( !Sanitize::pathFile($languageFilename) ) {
$languageFilename = PATH_PLUGINS.$Plugin->directoryName().DS.'languages'.DS.DEFAULT_LANGUAGE_FILE; $languageFilename = PATH_PLUGINS.$Plugin->directoryName().DS.'languages'.DS.DEFAULT_LANGUAGE_FILE;
if( !Sanitize::pathFile($languageFilename) ) {
continue;
}
} }
$database = file_get_contents($languageFilename); $database = file_get_contents($languageFilename);