nik/davical
1
0
Fork 0
mirror of https://gitlab.com/davical-project/davical.git synced 2026-09-23 06:39:18 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

It's possible for $_SERVER['PATH_INFO'] to be unset.

Browse Source
This commit is contained in:
Andrew McMillan 2010-02-25 09:48:38 +13:00
parent 08fe102b8e
commit 49257629ea
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
htdocs/caldav.php
View File

@ -8,7 +8,7 @@
* @copyright Catalyst .Net Ltd, Morphoss Ltd <http://www.morphoss.com/> * @copyright Catalyst .Net Ltd, Morphoss Ltd <http://www.morphoss.com/>
* @license http://gnu.org/copyleft/gpl.html GNU GPL v2 or later * @license http://gnu.org/copyleft/gpl.html GNU GPL v2 or later
*/ */
if ( preg_match( '{^(/favicon.ico|davical.css|(images|js|css)/.+)$}', $_SERVER['PATH_INFO'], $matches ) ) { if ( isset($_SERVER['PATH_INFO']) && preg_match( '{^(/favicon.ico|davical.css|(images|js|css)/.+)$}', $_SERVER['PATH_INFO'], $matches ) ) {
$filename = $_SERVER['DOCUMENT_ROOT'] . preg_replace('{(\.\.|\\\\)}', '', $matches[1]); $filename = $_SERVER['DOCUMENT_ROOT'] . preg_replace('{(\.\.|\\\\)}', '', $matches[1]);
$fh = @fopen($matches[1],'r'); $fh = @fopen($matches[1],'r');
if ( ! $fh ) { if ( ! $fh ) {