From d819e207216da8b972967598adfcb0f49db2f109 Mon Sep 17 00:00:00 2001 From: "Fedor A. Fetisov" Date: Mon, 24 Mar 2014 03:07:32 +0400 Subject: [PATCH] Encode the value of Mibew root according to RFC 3986 --- src/mibew/libs/common.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/mibew/libs/common.php b/src/mibew/libs/common.php index e950f81e..e7b2fa0a 100644 --- a/src/mibew/libs/common.php +++ b/src/mibew/libs/common.php @@ -24,7 +24,7 @@ if (isset($use_open_basedir_protection) && $use_open_basedir_protection) { } // Sanitize path to application and remove extra slashes -$mibewroot = join("/", array_map("urlencode", preg_split('/\//', preg_replace('/\/+$/', '', preg_replace('/\/{2,}/', '/', '/' . $mibewroot))))); +$mibewroot = join("/", array_map("rawurlencode", preg_split('/\//', preg_replace('/\/+$/', '', preg_replace('/\/{2,}/', '/', '/' . $mibewroot))))); // Sanitize database tables prefix $mysqlprefix = preg_replace('/[^A-Za-z0-9_$]/', '', $mysqlprefix);