Minahito
minah****@users*****
2007年 4月 2日 (月) 14:41:22 JST
Index: xoops2jp/html/modules/legacyRender/kernel/Legacy_AdminRenderSystem.class.php diff -u xoops2jp/html/modules/legacyRender/kernel/Legacy_AdminRenderSystem.class.php:1.1.2.10 xoops2jp/html/modules/legacyRender/kernel/Legacy_AdminRenderSystem.class.php:1.1.2.10.2.1 --- xoops2jp/html/modules/legacyRender/kernel/Legacy_AdminRenderSystem.class.php:1.1.2.10 Wed Nov 8 15:41:37 2006 +++ xoops2jp/html/modules/legacyRender/kernel/Legacy_AdminRenderSystem.class.php Mon Apr 2 14:41:22 2007 @@ -264,8 +264,14 @@ function Legacy_function_stylesheet($params, &$smarty) { + if (!isset($params['file'])) { + $smarty->trigger_error("stylesheet: missing file parameter."); + } + $file = $params['file']; + if (strstr($file, "..") !== false) { + $smarty->trigger_error("stylesheet: missing file parameter."); return; }