From 935d11a189552195c1f5f90d0908936801073cde Mon Sep 17 00:00:00 2001
From: Akshay Jain <30288355+wr3nch0x1@users.noreply.github.com>
Date: Sat, 26 Jun 2021 16:49:35 +0530
Subject: [PATCH] Update api.php

---
 web/api.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/api.php b/web/api.php
index 77247e1..669f614 100644
--- a/web/api.php
+++ b/web/api.php
@@ -8,7 +8,7 @@ ini_set('display_errors', 1);
 include_once(ROOT.DS.'inc'.DS.'core.php');
 
 $action = strtolower($_REQUEST['a']);
-$email = strtolower($_REQUEST['email']);
+$email = basename(realpath(strtolower($_REQUEST['email'])));
 
 switch($action)
 {