Skip to content

Commit 99b25c3

Browse files
committed
Return a 404 if api/file/sequence called directly with no file
1 parent 502ffc3 commit 99b25c3

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

www/api/controllers/files.php

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -385,7 +385,8 @@ function GetFileImpl($dir, $filename, $lines, $play, $attach)
385385
$filename = substr($filename, 8);
386386
}
387387

388-
if (!file_exists($dir . '/' . $filename)) {
388+
if (!file_exists($dir . '/' . $filename) || !is_file($dir . '/' . $filename)) {
389+
http_response_code(404);
389390
echo "File $dir/$filename does not exist.";
390391
return;
391392
}

0 commit comments

Comments
 (0)