瀏覽代碼

Fixes delete personal file in documents see #7457

Julio 10 年之前
父節點
當前提交
533b038501
共有 1 個文件被更改,包括 2 次插入0 次删除
  1. 2 0
      main/document/document.php

+ 2 - 0
main/document/document.php

@@ -180,6 +180,8 @@ if (Portfolio::controller()->accept()) {
     Portfolio::controller()->run();
 }
 
+$curdirpath = isset($_GET['curdirpath']) ? Security::remove_XSS($_GET['curdirpath']) : null;
+
 switch ($action) {
     case 'delete_item':
         if ($is_allowed_to_edit ||