From 0e7088128ce0c3c0df1ce1b4c3dc778cb6c6eb01 Mon Sep 17 00:00:00 2001 From: Chenx221 Date: Thu, 11 Apr 2024 15:40:08 +0800 Subject: [PATCH] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=E5=9C=A8linux=E4=B8=8A?= =?UTF-8?q?=E4=BD=BF=E7=94=A8=E9=94=99=E8=AF=AF=E5=88=86=E9=9A=94=E7=AC=A6?= =?UTF-8?q?=E7=9A=84=E9=97=AE=E9=A2=98=20*=E5=9C=A8debian=2012=E4=B8=8A?= =?UTF-8?q?=E6=B5=8B=E8=AF=95?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- controllers/HomeController.php | 2 +- controllers/VaultController.php | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/controllers/HomeController.php b/controllers/HomeController.php index 3cf7c11..0b95044 100644 --- a/controllers/HomeController.php +++ b/controllers/HomeController.php @@ -171,7 +171,7 @@ class HomeController extends Controller // 使用realpath函数解析路径，并检查解析后的路径是否在预期的目录中 $realPath = realpath($absolutePath); - $dataDirectory = str_replace('/', '\\', Yii::getAlias(Yii::$app->params['dataDirectory'])); + $dataDirectory = str_replace(['/', '\\'], DIRECTORY_SEPARATOR, Yii::getAlias(Yii::$app->params['dataDirectory'])); if (!$realPath || !str_starts_with($realPath, $dataDirectory)) { throw new NotFoundHttpException('File not found.'); } diff --git a/controllers/VaultController.php b/controllers/VaultController.php index a67a1ea..541b701 100644 --- a/controllers/VaultController.php +++ b/controllers/VaultController.php @@ -157,7 +157,7 @@ class VaultController extends Controller // 使用realpath函数解析路径，并检查解析后的路径是否在预期的目录中 $realPath = realpath($absolutePath); - $dataDirectory = str_replace('/', '\\', Yii::getAlias(Yii::$app->params['dataDirectory'])); + $dataDirectory = str_replace(['/', '\\'], DIRECTORY_SEPARATOR, Yii::getAlias(Yii::$app->params['dataDirectory'])); if (!$realPath || !str_starts_with($realPath, $dataDirectory)) { throw new NotFoundHttpException('File not found.'); }