Added another security check to cached files

Geeklog-Core · Nov 23, 2017 · 854c26a · 854c26a
1 parent 5ee56ea
commit 854c26a
Showing 1 changed file with 6 additions and 1 deletion.
diff --git a/system/classes/Cache/FileSystem.php b/system/classes/Cache/FileSystem.php
@@ -11,6 +11,8 @@
  */
 class FileSystem implements CacheInterface
 {
+    const SECURITY_HEADER = "<?php if (!defined('VERSION')) { die('This file cannot be used on its own!'); } ?>\n";
+
     /**
      * @var string
      */
@@ -120,6 +122,8 @@ public function get($key, $defaultValue = null)
             return $defaultValue;
         }
 
+        // Remove security header
+        $temp = str_replace(self::SECURITY_HEADER, '', $temp);
         $data = @unserialize($temp);
 
         if ($data === false) {
@@ -157,8 +161,9 @@ public function set($key, $data, $ttl = 0)
             'ttl'     => (int) $ttl,
             'hash'    => $this->getHash($data),
         );
+        $serialized = self::SECURITY_HEADER . serialize($item);
 
-        return (@file_put_contents($fileName, serialize($item)) !== false);
+        return (@file_put_contents($fileName, $serialized) !== false);
     }
 
     /**