frio: sanitise $schema
This commit is contained in:
parent
7e273ba51b
commit
2687a42e3c
|
@ -60,6 +60,9 @@ if (! $a->install) {
|
|||
if ($_REQUEST['schema']) {
|
||||
$schema = $_REQUEST['schema'];
|
||||
}
|
||||
|
||||
$schema = basename($schema);
|
||||
|
||||
if (($schema) && ($schema != '---')) {
|
||||
if (file_exists('view/theme/frio/schema/' . $schema . '.php')) {
|
||||
$schemefile = 'view/theme/frio/schema/' . $schema . '.php';
|
||||
|
|
Loading…
Reference in a new issue