Changeset 2032 in ExiteCMS for trunk/getfile.php

Timestamp:

11/15/08 14:39:40 (4 years ago)

Author:

WanWizard

Message:

log file download using relative path, do not expose the absolute path

File:

• trunk/getfile.php (modified) (2 diffs)

trunk/getfile.php

@@ -438 +438 @@
                     $filepath = $cat['fd_path'].$cat['fd_this_dir'];
                     $downloadname = $cat['files'][$file_id]['name'];
+                    break;
                 }
             }
@@ -448 +449 @@
         // add the download to the statistics tables
         $on_map = empty($settings['dlstats_geomap_regex']) || preg_match($settings['dlstats_geomap_regex'], trim($filepath.$filename));
-        log_download($filepath.$filename, USER_IP, $on_map, 1, time());
+        log_download($cat['fd_this_dir'].$filename, USER_IP, $on_map, 1, time());
         break;