Merge pull request #27 from wr3nch0x1/master

Update api.php
2021-06-28 11:23:12 +02:00 · 2021-06-28 11:23:12 +02:00 · cc7b18400a
parent 6fec905ec2 935d11a189
commit cc7b18400a
1 changed files with 1 additions and 1 deletions
--- a/web/api.php
+++ b/web/api.php
@ -8,7 +8,7 @@ ini_set('display_errors', 1);
 include_once(ROOT.DS.'inc'.DS.'core.php');

 $action = strtolower($_REQUEST['a']);
-$email = strtolower($_REQUEST['email']);
+$email = basename(realpath(strtolower($_REQUEST['email'])));

 switch($action)
 {