From 0b14b4e3e8b184197e6b2ad501d07af0f803c774 Mon Sep 17 00:00:00 2001 From: Michael Gapczynski Date: Tue, 10 Jul 2012 18:59:42 -0400 Subject: [PATCH] Call exit() to prevent further code execution if directory does not exist --- apps/files/index.php | 1 + 1 file changed, 1 insertion(+) diff --git a/apps/files/index.php b/apps/files/index.php index c2c0cb6170c..79bed8e357e 100644 --- a/apps/files/index.php +++ b/apps/files/index.php @@ -40,6 +40,7 @@ $dir = isset( $_GET['dir'] ) ? stripslashes($_GET['dir']) : ''; // Redirect if directory does not exist if(!OC_Filesystem::is_dir($dir.'/')) { header('Location: '.$_SERVER['PHP_SELF'].''); + exit(); } $files = array(); -- 2.39.5