From ca04c1a0f88ef61aa8206a95547202670971919c Mon Sep 17 00:00:00 2001 From: Michael Gapczynski Date: Tue, 10 Jul 2012 18:59:42 -0400 Subject: [PATCH] Call exit() to prevent further code execution if directory does not exist --- apps/files/index.php | 1 + 1 file changed, 1 insertion(+) diff --git a/apps/files/index.php b/apps/files/index.php index c2c0cb6170..79bed8e357 100644 --- a/apps/files/index.php +++ b/apps/files/index.php @@ -40,6 +40,7 @@ $dir = isset( $_GET['dir'] ) ? stripslashes($_GET['dir']) : ''; // Redirect if directory does not exist if(!OC_Filesystem::is_dir($dir.'/')) { header('Location: '.$_SERVER['PHP_SELF'].''); + exit(); } $files = array();