diff options
author | Nathan Gass | 2025-09-08 10:33:15 +0200 |
---|---|---|
committer | Nathan Gass | 2025-09-08 10:33:15 +0200 |
commit | 73004cf10a28b8f0b9420c44440a5c56b0406257 (patch) | |
tree | 6affd997487452a6494bc64351a1466249eff335 /it.class | |
parent | b231136ec610a6e7947904d97d6ddaf882b5f18d (diff) | |
download | itools-73004cf10a28b8f0b9420c44440a5c56b0406257.tar.gz itools-73004cf10a28b8f0b9420c44440a5c56b0406257.tar.bz2 itools-73004cf10a28b8f0b9420c44440a5c56b0406257.zip |
revert handling of - in it::safe_filename, we do not know if php://stdin or php://stdout is meant without context
Diffstat (limited to 'it.class')
-rw-r--r-- | it.class | 4 |
1 files changed, 2 insertions, 2 deletions
@@ -1185,7 +1185,7 @@ static function file_get($filename, $p = array()) { if (isset($p['it_cache']) && ($key = "it_file_get_" . md5(json_encode([$filename, $p]))) && ($result = it_cache::get($key, $p['it_cache'])) !== null) return $result; - elseif (($data = it::file_get_contents($filename)) !== false) + elseif (($data = it::file_get_contents($filename == "-" ? "php://stdin" : $filename)) !== false) { if ($p['keyval']) { @@ -1318,7 +1318,7 @@ static function safe_filename($filename) { if (it::match("\.\./", $filename)) it::fatal(['title' => "../ contained in '$filename', aborted"]); - $filename = it::replace(['^/dev/fd/(\d+)$' => 'php://fd/$1', '^-$' => 'php://stdin'], $filename); + $filename = it::replace(['^/dev/fd/(\d+)$' => 'php://fd/$1'], $filename); return $filename; } |