composer/iTop
6
0
Fork 0
mirror of https://github.com/Combodo/iTop.git synced 2026-05-19 07:12:26 +02:00
Code Issues Packages Projects Releases Wiki Activity

N°1933: Security hardening

Browse Source
This commit is contained in:
Stephen Abello
2019-01-14 11:57:16 +01:00
parent dfe81f6272
commit ed3fd851f1
1 changed files with 15 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

23
setup/backup.class.inc.php
View File

@@ -528,14 +528,21 @@ if (class_exists('ZipArchive')) // The setup must be able to start even if the "
*/ */
public function DownloadBackup($sFile) public function DownloadBackup($sFile)
{ {
header('Content-Description: File Transfer'); if (file_exists($sFile))
header('Content-Type: multipart/x-zip'); {
header('Content-Disposition: inline; filename="'.basename($sFile).'"'); header('Content-Description: File Transfer');
header('Expires: 0'); header('Content-Type: multipart/x-zip');
header('Cache-Control: must-revalidate'); header('Content-Disposition: inline; filename="'.basename($sFile).'"');
header('Pragma: public'); header('Expires: 0');
header('Content-Length: '.filesize($sFile)); header('Cache-Control: must-revalidate');
readfile($sFile); header('Pragma: public');
header('Content-Length: '.filesize($sFile));
readfile($sFile) ;
}
else
{
throw new InvalidParameterException('Invalid file path');
}
} }
/** /**