From 21c6cc45e610f47f7bb7a77132a8f2effd5a83f9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bj=C3=B6rn=20Schie=C3=9Fle?= <schiessle@owncloud.com>
Date: Wed, 26 Sep 2012 23:08:40 +0200
Subject: [PATCH] take '\' on windows systems into account to prevent file
deletion above upload direectory
---
apps/files_external/ajax/removeRootCertificate.php | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/apps/files_external/ajax/removeRootCertificate.php b/apps/files_external/ajax/removeRootCertificate.php
index f87d4a5630..8c196eddf5 100644
--- a/apps/files_external/ajax/removeRootCertificate.php
+++ b/apps/files_external/ajax/removeRootCertificate.php
@@ -5,7 +5,7 @@ OCP\JSON::checkLoggedIn();
OCP\JSON::callCheck();
$view = \OCP\Files::getStorage("files_external");
-$cert = ltrim($_POST['cert'], "/.");
+$cert = ltrim($_POST['cert'], "/\\.");
$file = \OCP\Config::getSystemValue('datadirectory').$view->getAbsolutePath("").'uploads/'.$cert;
unlink($file);
OC_Mount_Config::createCertificateBundle();
--
GitLab