Service patch to fix embarrassing privacy problem, 8-).

1 files changed, 5 insertions, 1 deletions

diff --git a/html/fileshow.phtml b/html/fileshow.phtml
index 5560a911..5859634a 100644
--- a/html/fileshow.phtml
+++ b/html/fileshow.phtml
@@ -5,7 +5,11 @@
   if ($title=="") { $title = $filename; };
   small_header($title);
   print "<pre>\n";
-  markup_plain_text($filename);
+  if (substr($filename,0,1)=="." or substr($filename,0,1)=="/") {
+     print "Sorry, can't show you that file!\n"; 
+  } else {
+     markup_plain_text($filename);
+  }
   print "</pre>\n";
   print "<hr>";
   click_to_go_back();