summaryrefslogtreecommitdiff
path: root/actions/getfile.php
diff options
context:
space:
mode:
authorBrion Vibber <brion@pobox.com>2010-02-01 09:04:13 -0800
committerBrion Vibber <brion@pobox.com>2010-02-01 09:04:13 -0800
commit1625a13b93e1490c3f2a3d6f0dcf2bcaaf4a4c51 (patch)
treec21ba81d34c3db8786e26dc9d87f66b0eda31dbb /actions/getfile.php
parent0787daff2cd3d73ac1a4af2353b35f6199ebff49 (diff)
parent6159edcebbcb1c230113e18788a676035979a4c8 (diff)
Merge remote branch 'statusnet/master' into testing
Diffstat (limited to 'actions/getfile.php')
-rw-r--r--actions/getfile.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/actions/getfile.php b/actions/getfile.php
index cd327e410..9cbe8e1d9 100644
--- a/actions/getfile.php
+++ b/actions/getfile.php
@@ -71,7 +71,7 @@ class GetfileAction extends Action
$filename = $this->trimmed('filename');
$path = null;
- if ($filename) {
+ if ($filename && File::validFilename($filename)) {
$path = File::path($filename);
}