Strip directories from filename in getFont.php
authorTim Düsterhus <duesterhus@woltlab.com>
Wed, 15 Jul 2020 11:42:29 +0000 (13:42 +0200)
committerTim Düsterhus <duesterhus@woltlab.com>
Wed, 15 Jul 2020 11:45:08 +0000 (13:45 +0200)
wcfsetup/install/files/font/getFont.php

index 0591980274a4a14e76a6f76e9fed6789ff8152c1..4821d3d11d37872e372099b528334c1accefcaad 100644 (file)
@@ -42,7 +42,7 @@ else {
        if (!empty($_GET['family'])) {
                $filename .= 'families/'.basename($_GET['family']).'/';
        }
-       $filename .= $_GET['filename'];
+       $filename .= basename($_GET['filename']);
 }
 
 $type = pathinfo($filename, PATHINFO_EXTENSION);