path check: listForTable

usmannasir · Jan 17, 2020 · 970ee42 · 970ee42
1 parent e66282e
commit 970ee42
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/filemanager/filemanager.py b/filemanager/filemanager.py
@@ -44,7 +44,9 @@ def listForTable(self):
             domainName = self.data['domainName']
             website = Websites.objects.get(domain=domainName)
 
-            if not self.data['completeStartingPath'].find(self.data['home']) > -1:
+            pathCheck = '/home/%s' % (domainName)
+
+            if self.data['completeStartingPath'].find(pathCheck) == -1:
                 return self.ajaxPre(0, 'Not allowed to browse this path, going back home!')
 
             command = "ls -la --group-directories-first " + self.returnPathEnclosed(