Skip dot files which could violate `open_basedir`
authorAlexander Ebert <ebert@woltlab.com>
Mon, 20 Nov 2023 11:54:45 +0000 (12:54 +0100)
committerAlexander Ebert <ebert@woltlab.com>
Mon, 20 Nov 2023 11:54:45 +0000 (12:54 +0100)
See https://www.woltlab.com/community/thread/302928/

wcfsetup/install/files/lib/system/WCFSetup.class.php

index 0a23948dff68257e4f6de34415b3bc94c820193d..f4224a8fd44d88060c3fab1866c9efca105e8255 100644 (file)
@@ -1059,7 +1059,7 @@ final class WCFSetup extends WCF
 
         // Delete tmp files
         foreach (new \DirectoryIterator(\INSTALL_SCRIPT_DIR) as $fileInfo) {
-            if (!$fileInfo->isDir()) {
+            if ($fileInfo->isDot() || !$fileInfo->isDir()) {
                 continue;
             }