diff --git a/web/api.php b/web/api.php index 279622b..0ca9c69 100644 --- a/web/api.php +++ b/web/api.php @@ -54,7 +54,7 @@ switch($action) break; case 'attachment': $id = intval($_REQUEST['id']); - $filename = basename(realpath($_REQUEST['filename'])); + $filename = basename($_REQUEST['filename']); $filepath = $dir.DS.'attachments'.DS.$id.'-'.$filename; if(!is_dir($dir)) $o = array('status'=>'err','reason'=>'No emails received on this address');