diff --git a/index.php b/index.php index 7a361bf..65c7466 100644 --- a/index.php +++ b/index.php @@ -1921,6 +1921,7 @@ public static function showThumbnail($file) public static function isAllowedToOpenPath($file) { + global $_CONFIG; if(realpath($file) && str_starts_with(realpath($file), realpath($_CONFIG['starting_dir']))) return true; return false;