summaryrefslogtreecommitdiff
path: root/LedgerSMB.pm
diff options
context:
space:
mode:
authoreinhverfr <einhverfr@4979c152-3d1c-0410-bac9-87ea11338e46>2007-03-23 06:00:01 +0000
committereinhverfr <einhverfr@4979c152-3d1c-0410-bac9-87ea11338e46>2007-03-23 06:00:01 +0000
commit5ac924ad28a04bb9c02e683306ddfca5a046e4c2 (patch)
tree4ad48f40a1bb8b0828102323f892442fb270aa2f /LedgerSMB.pm
parent66d7a2a1bfa0bb6f70f7edb519482ee760689878 (diff)
Renamed images to ledgersmb*
git-svn-id: https://ledger-smb.svn.sourceforge.net/svnroot/ledger-smb/trunk@996 4979c152-3d1c-0410-bac9-87ea11338e46
Diffstat (limited to 'LedgerSMB.pm')
-rwxr-xr-xLedgerSMB.pm10
1 files changed, 10 insertions, 0 deletions
diff --git a/LedgerSMB.pm b/LedgerSMB.pm
index 3a06bacf..37fbe009 100755
--- a/LedgerSMB.pm
+++ b/LedgerSMB.pm
@@ -131,6 +131,16 @@ sub new {
$self->{lynx} = 1;
}
+ $self->{path} =~ s#\\#/#g;
+ if (($self->{path}) && ($self->{path} !~ m#^bin/#)
+ || ($self->{path} =~ m#(\w*/){2,}#)){
+ $self->error("Access Denied");
+ }
+ if (($self->{script} =~ m#(..|\\|/)#)){
+ $self->error("Access Denied");
+ }
+
+
$self;
}