klarkxy/hustoj
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

修复错误

Browse Source
This commit is contained in:
klarkxy
2025-03-02 18:37:50 +08:00
parent ef65c15c2a
commit 7153217140
2 changed files with 14 additions and 11 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
web/demos/index.php
View File

@@ -11,14 +11,14 @@ foreach ($directory as $folderinfo) {
}
foreach ($folders as $folder) {
$subDirectory = new DirectoryIterator(dirname(__FILE__) . $folder);
$subDirectory = new DirectoryIterator(dirname(__FILE__) . '/' . $folder);
foreach ($subDirectory as $fileinfo) {
if ($fileinfo->isFile() && $fileinfo->getExtension() == 'html') {
$files[] = $folder . '/' . $fileinfo->getFilename();
}
}
}
sort($folder);
sort($folders);
sort($files);
?>
@@ -37,12 +37,15 @@ sort($files);
<?php
if (isset($_GET['file'])) {
$file = $_GET['file'];
$filePath = dirname(__FILE__) . '/' . $file;
if (file_exists($filePath) && is_readable($filePath)) {
if (pathinfo($filePath, PATHINFO_EXTENSION) == 'php') {
include $filePath;
// Validate file path to prevent directory traversal
$realPath = realpath(dirname(__FILE__) . '/' . $file);
$basePath = realpath(dirname(__FILE__));
if ($realPath && strpos($realPath, $basePath) === 0 && file_exists($realPath) && is_readable($realPath)) {
if (pathinfo($realPath, PATHINFO_EXTENSION) == 'php') {
include $realPath;
} else {
echo file_get_contents($filePath);
echo file_get_contents($realPath);
}
} else {
echo '<p>File not found or not readable.</p>';