Skip to content

Commit f2bbd37

Browse files
author
Tom Canac
committed
fix #102 ?
1 parent cdac1db commit f2bbd37

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

index.php

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -406,7 +406,7 @@ function checkpermissions($file)
406406
if ($requestedDir != "" && $requestedDir != "photos") {
407407
$breadcrumb_navigation = "<div class=\"NavWrapper\">";
408408
$breadcrumb_navigation .= "<a href='?dir='>" . $label_home . "</a> $breadcrumb_separator ";
409-
$navitems = explode("/", $_REQUEST['dir']);
409+
$navitems = explode("/", htmlspecialchars($_REQUEST['dir']));
410410
for ($i = 0; $i < sizeof($navitems); $i++) {
411411
if ($i == sizeof($navitems)-1) {
412412
$breadcrumb_navigation .= $navitems[$i];

0 commit comments

Comments
 (0)