diff options
| author | Andreas Gohr <andi@splitbrain.org> | 2012-10-23 18:08:57 +0200 |
|---|---|---|
| committer | Andreas Gohr <andi@splitbrain.org> | 2012-10-23 18:10:10 +0200 |
| commit | 58789954a7642c133920f37a51fd3dbb5d76cbde (patch) | |
| tree | cda49269c179c8a59e72daf15c568200b26a46a7 /lib | |
| parent | aa4702d3ed1c12bf82e2c3c97eed1663344f51ba (diff) | |
| download | rpg-58789954a7642c133920f37a51fd3dbb5d76cbde.tar.gz rpg-58789954a7642c133920f37a51fd3dbb5d76cbde.tar.bz2 | |
correctly check hash parameter in media dispatcher FS#2648
Diffstat (limited to 'lib')
| -rw-r--r-- | lib/exe/fetch.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/exe/fetch.php b/lib/exe/fetch.php index e8f189256..52e7ebe1e 100644 --- a/lib/exe/fetch.php +++ b/lib/exe/fetch.php @@ -157,7 +157,7 @@ function checkFileStatus(&$media, &$file, $rev='') { //media to local file if(preg_match('#^(https?)://#i',$media)){ //check hash - if(substr(md5(auth_cookiesalt().$media),0,6) != $INPUT->str('hash')){ + if(substr(md5(auth_cookiesalt().$media),0,6) !== $INPUT->str('hash')){ return array( 412, 'Precondition Failed'); } //handle external images |