additional fix for issue #98

pluck-cms · Apr 26, 2021 · 53ac175 · 53ac175
1 parent 89c40c7
commit 53ac175
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/data/inc/files.php b/data/inc/files.php
@@ -33,6 +33,10 @@
 <?php
 if (isset($_POST['submit'])) {
 	$filenamestr = strtolower(latinOnlyInput($_FILES['filefile']['name']));
+	//remove a leading / if exists issue #98
+	if (substr($filenamestr, 0, 1) == '/'){
+		$filenamestr = substr($filenamestr, 1);
+	}
 	if ($filenamestr == '.htaccess' or strtolower(substr($filenamestr, 0, 9)) == '.htaccess'){
 		show_error($lang['general']['upload_failed'], 1);
 	} else {