Skip to content

Commit 9ce6301

Browse files
committed
fix code execution filter
in avatar upload
1 parent 07c22ee commit 9ce6301

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Diff for: manageuser.php

+1-1
Original file line numberDiff line numberDiff line change
@@ -151,7 +151,7 @@
151151
die();
152152
}
153153
// don't upload php scripts
154-
if ($erweiterung == "php" or $erweiterung == "pl") {
154+
if (stristr($erweiterung,"php") or $erweiterung == "pl") {
155155
$loc = $url . "manageuser.php?action=profile&id=$userid";
156156
header("Location: $loc");
157157
die();

0 commit comments

Comments
 (0)