summaryrefslogtreecommitdiffstats
path: root/system/helpers
diff options
context:
space:
mode:
authornopesled <x86sec@yahoo.ie>2016-07-15 01:01:38 +0200
committerGitHub <noreply@github.com>2016-07-15 01:01:38 +0200
commitc1699561a68501dd25e558871b18eb9fbed3e017 (patch)
tree6825fe98264d0082232caec13314b27db1abad41 /system/helpers
parentc20db3181733f701987d856f793f22b227d21762 (diff)
parent85eaa0bff12574b8a1c08b68942ff070e6bb341c (diff)
Merge pull request #1 from nopesled/nopesled-patch-1
Update path_helper.php
Diffstat (limited to 'system/helpers')
-rw-r--r--system/helpers/path_helper.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/system/helpers/path_helper.php b/system/helpers/path_helper.php
index 838ece9e9..18e175093 100644
--- a/system/helpers/path_helper.php
+++ b/system/helpers/path_helper.php
@@ -61,7 +61,7 @@ if ( ! function_exists('set_realpath'))
function set_realpath($path, $check_existance = FALSE)
{
// Security check to make sure the path is NOT a URL. No remote file inclusion!
- if (preg_match('#^(http:\/\/|https:\/\/|www\.|ftp)#i', $path) OR filter_var($path, FILTER_VALIDATE_IP) === $path )
+ if (preg_match('#^(http:\/\/|https:\/\/|www\.|ftp|php:\/\/)#i', $path) OR filter_var($path, FILTER_VALIDATE_IP) === $path )
{
show_error('The path you submitted must be a local server path, not a URL');
}