keep within dir for deleting backups for danpros#462

ProjectPatatoe · May 12, 2021 · 25cdee3 · 25cdee3
1 parent e8228b8
commit 25cdee3
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/system/admin/views/backup.html.php b/system/admin/views/backup.html.php
@@ -3,7 +3,7 @@
 if (login()) {
     if (isset($_GET['file'])) {
         $file = _h($_GET['file']);
-
+        $file = preg_replace('/\/|\\\\/','0',$file);
         if (!empty($file)) {
             unlink("backup/$file");
         }