diff --git a/composer.lock b/composer.lock index 260be1b..21c15ad 100644 --- a/composer.lock +++ b/composer.lock @@ -414,7 +414,7 @@ "source": { "type": "git", "url": "https://git.flash.moe/flash/index.git", - "reference": "405724ec3f9f9f2fb318c5a1d9db175e1b99c382" + "reference": "f71f3fcf9eb916420f3e8217f99e616149aedc76" }, "require": { "ext-mbstring": "*", @@ -452,7 +452,7 @@ ], "description": "Composer package for the common library for my projects.", "homepage": "https://railgun.sh/index", - "time": "2023-09-11T20:08:15+00:00" + "time": "2023-09-11T20:34:16+00:00" }, { "name": "flashwave/sasae", diff --git a/public/index.php b/public/index.php index 89e08d9..fb2c82b 100644 --- a/public/index.php +++ b/public/index.php @@ -137,18 +137,17 @@ $mszLegacyPath = $mszLegacyPathPrefix . $mszRequestPath; if(!empty($mszLegacyPath) && str_starts_with($mszLegacyPath, $mszLegacyPathPrefix)) { $mszLegacyPathReal = realpath($mszLegacyPath); - if($mszLegacyPath !== $mszLegacyPathReal && $mszLegacyPath !== $mszLegacyPathReal . '/') - Template::throwError(404); + if($mszLegacyPath === $mszLegacyPathReal || $mszLegacyPath === $mszLegacyPathReal . '/') { + if(str_starts_with($mszRequestPath, '/manage') && !$msz->hasManageAccess()) + Template::throwError(403); - if(str_starts_with($mszRequestPath, '/manage') && !$msz->hasManageAccess()) - Template::throwError(403); + if(is_dir($mszLegacyPath)) + $mszLegacyPath .= '/index.php'; - if(is_dir($mszLegacyPath)) - $mszLegacyPath .= '/index.php'; - - if(is_file($mszLegacyPath)) { - require_once $mszLegacyPath; - return; + if(is_file($mszLegacyPath)) { + require_once $mszLegacyPath; + return; + } } }