could you define 'don't allow realpath()'
Does realpath just return false / null or will it trigger a PHP Fatal function 
not found?

Am 07.05.2012 um 13:30 schrieb Florian Hülsmann:

> Thanks :) But there are several shared hosts that don't allow realpath() 
> execution (for "security reasons" -.-), are we gonna support them..?
> 
> Florian
> 
> Am 07.05.2012 13:25, schrieb Georg Ehrke:
>> It's fixed 
>> (https://gitorious.org/owncloud/owncloud/commit/d032345191c57294d5723639f777692c85bd2b1a)
>> It seems like there has been ******* merge conflicts which caused this fail. 
>> (I actually fixed this earlier)
>> It should now return a 404.
>> 
>> Cheers,
>> Georg
>> 
>> 
>> Am 07.05.2012 um 13:12 schrieb Florian Hülsmann:
>> 
>>> /owncloud/?app=files&getfile=/../../data/bestfriend/files/hack.php
>>> 
>>> I don't think I have to be more specific.
>>> 
>>> Florian
>>> 
>>> --
>>> Florian Hülsmann
>>> <[email protected]>
>>> http://cbix.de
>>> _______________________________________________
>>> Owncloud mailing list
>>> [email protected]
>>> https://mail.kde.org/mailman/listinfo/owncloud
>> 
> 
> -- 
> Florian Hülsmann
> <[email protected]>
> http://cbix.de

_______________________________________________
Owncloud mailing list
[email protected]
https://mail.kde.org/mailman/listinfo/owncloud

Reply via email to