github/myvesta
1
0
Fork 0
mirror of https://github.com/myvesta/vesta synced 2025-08-19 04:50:47 -07:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #507 from SysVoid/patch-4

Browse source 
+backup directory check, -closing PHP tag.
This commit is contained in:
Serghey Rodin 2015-12-11 21:55:16 +02:00
commit 747c79d649
1 changed files with 5 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

7
web/download/backup/index.php
View file

@ -5,6 +5,11 @@ session_start();
include($_SERVER['DOCUMENT_ROOT']."/inc/main.php"); include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
$backup = $_GET['backup']; $backup = $_GET['backup'];
// Check if the backup exists
if (!file_exists($backup)) {
exit(0);
}
// Data // Data
if ($_SESSION['user'] == 'admin') { if ($_SESSION['user'] == 'admin') {
header('Content-type: application/gzip'); header('Content-type: application/gzip');
@ -19,5 +24,3 @@ if ((!empty($_SESSION['user'])) && ($_SESSION['user'] != 'admin')) {
header("X-Accel-Redirect: /backup/" . $backup); header("X-Accel-Redirect: /backup/" . $backup);
} }
} }
?>