fix: add realpath to captcha font filepath, #314

f3-factory · Nov 4, 2022 · 7edda0e · 7edda0e
1 parent bff5916
commit 7edda0e
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/image.php b/image.php
@@ -414,7 +414,7 @@ function captcha($font,$size=24,$len=5,
 		}
 		$fw=Base::instance();
 		foreach ($fw->split($path?:$fw->UI.';./') as $dir)
-			if (is_file($path=$dir.$font)) {
+			if (is_file($path=realpath($dir.$font))) {
 				$seed=strtoupper(substr(
 					$ssl?bin2hex(openssl_random_pseudo_bytes($len)):uniqid(),
 					-$len));