diff options
author | christopherm <christopherm@4979c152-3d1c-0410-bac9-87ea11338e46> | 2006-09-12 01:40:12 +0000 |
---|---|---|
committer | christopherm <christopherm@4979c152-3d1c-0410-bac9-87ea11338e46> | 2006-09-12 01:40:12 +0000 |
commit | 17d7ded1c314d3d99e1a5e7fcd35814db166371d (patch) | |
tree | 2984d38a28c044af1a88c75859855512620638d5 | |
parent | e61f4561cb5a40df738eb5557f54bc0ffeee8e38 (diff) |
whitelisting $form{path} to one of two options
git-svn-id: https://ledger-smb.svn.sourceforge.net/svnroot/ledger-smb/trunk@70 4979c152-3d1c-0410-bac9-87ea11338e46
-rwxr-xr-x | menu.pl | 5 |
1 files changed, 1 insertions, 4 deletions
@@ -102,10 +102,7 @@ $SIG{__DIE__} = sub { $form->error($_[0]) }; $myconfig{dbpasswd} = unpack 'u', $myconfig{dbpasswd}; map { $form->{$_} = $myconfig{$_} } qw(stylesheet timeout) unless ($form->{type} eq 'preferences'); -$form->{path} =~ s/\.\.\///g; -if ($form->{path} !~ /^bin\//) { - $form->error($locale->text('Invalid path!')."\n"); -} +if ($form{path} ne 'bin/lynx'){ $form{path} = 'bin/mozilla';} # did sysadmin lock us out if (-f "$userspath/nologin") { |