[fix] openbase_dir correct processing, #13214

joomla · May 2, 2018 · 657869e · 657869e
1 parent e99b38d
commit 657869e
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/libraries/joomla/filesystem/folder.php b/libraries/joomla/filesystem/folder.php
@@ -247,7 +247,7 @@ public static function create($path = '', $mode = 0755)
 				{
 					$test = $pathObject->clean($test);
 
-					if (strpos($path, $test) === 0)
+					if (strpos($path, $test) === 0 || strpos($path, realpath($test)) === 0)
 					{
 						$inBaseDir = true;
 						break;

diff --git a/libraries/vendor/joomla/filesystem/src/Folder.php b/libraries/vendor/joomla/filesystem/src/Folder.php
@@ -179,7 +179,7 @@ public static function create($path = '', $mode = 0755)
 			{
 				$test = Path::clean($test);
 
-				if (strpos($path, $test) === 0)
+				if (strpos($path, $test) === 0 || strpos($path, realpath($test)) === 0)
 				{
 					$inBaseDir = true;
 					break;