fix: arbitrary lfi on wish image
This commit is contained in:
parent
212c4754ee
commit
2751bb2028
1 changed files with 1 additions and 1 deletions
|
@ -339,7 +339,7 @@ class Wish
|
|||
<?php if (file_exists(ROOT . $this->image)) { ?>
|
||||
<?= file_get_contents(ROOT . $this->image) ?>
|
||||
<?php } else { ?>
|
||||
<?= file_get_contents($this->image) ?>
|
||||
<?= file_get_contents(ROOT . self::NO_IMAGE) ?>
|
||||
<?php } ?>
|
||||
<?php } else { ?>
|
||||
<img class="preview" src="<?= $this->image ?>" loading="lazy" />
|
||||
|
|
Loading…
Reference in a new issue