Security update

WWBN · Mar 28, 2024 · fcb1f79 · fcb1f79
1 parent f41dc1b
commit fcb1f79
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 4 deletions.
diff --git a/install/checkConfiguration.php b/install/checkConfiguration.php
@@ -260,8 +260,10 @@
 /*
 FOR WWBNIndex Plugin
 */
-if (file_exists($_POST['systemRootPath'] . "plugin/WWBNIndex/submitIndex.php")) {
-    include ($_POST['systemRootPath'] . "plugin/WWBNIndex/submitIndex.php");
+$systemRootPath = __DIR__ . DIRECTORY_SEPARATOR . '../';
+$file = "{$systemRootPath}plugin/WWBNIndex/submitIndex.php";
+if (file_exists($file)) {
+    include $file;
 }
 error_log("Installation: ".__LINE__);
 $obj->success = true;

diff --git a/plugin/WWBNIndex/submitIndex.php b/plugin/WWBNIndex/submitIndex.php
@@ -2,8 +2,8 @@
 ini_set('display_errors', 1);
 ini_set('display_startup_errors', 1);
 error_reporting(E_ALL);
-
-require_once ($_POST['systemRootPath'] . "plugin/WWBNIndex/WWBNIndex.php");
+$systemRootPath = __DIR__ . DIRECTORY_SEPARATOR . '../../';
+require_once ($systemRootPath . "plugin/WWBNIndex/WWBNIndex.php");
 $wwbnIndex = new WWBNIndex();
 
 // if (!_mysql_is_open()) {