groove/Part-DB-server
1
0
Fork 0
mirror of https://github.com/Part-DB/Part-DB-server.git synced 2026-05-19 18:01:30 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Hardenened security of deleteLogEndpoint

Browse source
This commit is contained in:
Jan Böhmer 2026-03-07 18:54:01 +01:00
parent 8bf25a1e38
commit 6d43a979b8
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
src/Services/System/UpdateExecutor.php
View file

@ -613,7 +613,7 @@ class UpdateExecutor
return false;
}
$logPath = $this->project_dir . '/' . self::UPDATE_LOG_DIR . '/' . $filename;
$logPath = $this->project_dir . '/' . self::UPDATE_LOG_DIR . '/' . basename($filename);
if (!file_exists($logPath)) {
return false;