pi-hole/web
1
0
Fork 0
mirror of https://github.com/pi-hole/web.git synced 2024-12-06 19:36:21 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge pull request #481 from pi-hole/fix/unauthorized-access-to-teleporter

Browse Source 
Temporarily store the teleporter file
This commit is contained in:
Mcat12
2017-04-29 11:51:33 -04:00
committed by GitHub
parent d68ae23cb6 631f050440
commit 76218a7c36
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/pi-hole/php/teleporter.php
+3 -1
View File
@@ -148,7 +148,7 @@ if(isset($_POST["action"]))
else
{
$filename = "pi-hole-teleporter_".date("Y-m-d_h-i-s").".zip";
$archive_file_name = "/var/www/html/".$filename;
$archive_file_name = tempnam("/tmp", "Teleporter");
$zip = new ZipArchive();
touch($archive_file_name);
$res = $zip->open($archive_file_name, ZipArchive::CREATE | ZipArchive::OVERWRITE);
@@ -174,6 +174,8 @@ else
header("Expires: 0");
if(ob_get_length() > 0) ob_end_clean();
readfile($archive_file_name);
ignore_user_abort(true);
unlink($archive_file_name);
exit;
}