Globally untaint ULTRAHOME as it is generated in a safe way

2 files changed, 4 insertions, 1 deletions

diff --git a/auto_prepend.php b/auto_prepend.php
index 8955371..d382306 100644
--- a/auto_prepend.php
+++ b/auto_prepend.php
@@ -176,4 +176,7 @@ else
 	function it_taintcheck($value, $marks = 0) { return $value; }
 }
 
+# ULTRAHOME is generated in a safe way
+$GLOBALS['ULTRAHOME'] = it_untaint($GLOBALS['ULTRAHOME'], TC_ALL);
+
 ?>
diff --git a/it.class b/it.class
index 2a6fe35..083ca51 100644
--- a/it.class
+++ b/it.class
@@ -82,7 +82,7 @@ function log($name /* ... */)
 {
 	$args = func_get_args();
 	$line = date("Y-m-d H:i:s") . "\t" . implode("\t", array_slice($args, 1)) . "\n";
-	$fn = it_untaint($GLOBALS['ULTRAHOME'], TC_SELF) . "/log/$name-" . date('Ymd');
+	$fn = $GLOBALS['ULTRAHOME'] . "/log/$name-" . date('Ymd');
 
 	$existed = file_exists($fn);