From 2687a42e3cbf17b169da3d624c1b2d68d68678ca Mon Sep 17 00:00:00 2001 From: rabuzarus <> Date: Mon, 23 Oct 2017 22:14:35 +0200 Subject: [PATCH] frio: sanitise $schema --- view/theme/frio/style.php | 3 +++ 1 file changed, 3 insertions(+) diff --git a/view/theme/frio/style.php b/view/theme/frio/style.php index 7b1b8a350d..c227c354f8 100644 --- a/view/theme/frio/style.php +++ b/view/theme/frio/style.php @@ -60,6 +60,9 @@ if (! $a->install) { if ($_REQUEST['schema']) { $schema = $_REQUEST['schema']; } + +$schema = basename($schema); + if (($schema) && ($schema != '---')) { if (file_exists('view/theme/frio/schema/' . $schema . '.php')) { $schemefile = 'view/theme/frio/schema/' . $schema . '.php';