diff --git a/interface/lib/classes/functions.inc.php b/interface/lib/classes/functions.inc.php index 878fc5d44ae505f30ce417885277bd4d509d41aa..28ab9ce384da1aad506f2bd7468caa40b0aec7d1 100644 --- a/interface/lib/classes/functions.inc.php +++ b/interface/lib/classes/functions.inc.php @@ -480,8 +480,8 @@ class functions { // Function to check paths before we use it as include. Use with absolute paths only. public function check_include_path($path) { - if(strpos($path,'//') === false) die('Include path seems to be an URL: '.$this->htmlentities($path)); - if(strpos($path,'..') === false) die('Two dots are not allowed in include path: '.$this->htmlentities($path)); + if(strpos($path,'//') !== false) die('Include path seems to be an URL: '.$this->htmlentities($path)); + if(strpos($path,'..') !== false) die('Two dots are not allowed in include path: '.$this->htmlentities($path)); if(!preg_match("/^[a-zA-Z0-9_\/\.\-]+$/", $path)) die('Wrong chars in include path: '.$this->htmlentities($path)); $path = realpath($path); if($path == '') die('Include path does not exist.');