Browse Source

Merge pull request #507 from SysVoid/patch-4

+backup directory check, -closing PHP tag.
Serghey Rodin 10 years ago
parent
commit
747c79d649
1 changed files with 5 additions and 2 deletions
  1. 5 2
      web/download/backup/index.php

+ 5 - 2
web/download/backup/index.php

@@ -5,6 +5,11 @@ session_start();
 include($_SERVER['DOCUMENT_ROOT']."/inc/main.php");
 $backup = $_GET['backup'];
 
+// Check if the backup exists
+if (!file_exists($backup)) {
+    exit(0);
+}
+
 // Data
 if ($_SESSION['user'] == 'admin') {
     header('Content-type: application/gzip');
@@ -19,5 +24,3 @@ if ((!empty($_SESSION['user'])) && ($_SESSION['user'] != 'admin')) {
         header("X-Accel-Redirect: /backup/" . $backup);
     }
 }
-
-?>