From c82d24d475eb96ec8a7cb1d37b0eb8f2ee498b89 Mon Sep 17 00:00:00 2001 From: Bharat Mediratta Date: Sun, 4 Apr 2010 14:28:09 -0700 Subject: preg_quote() the pattern we use for directory globs to avoid letting the filename be treated as a regexp. Fixes #1086. --- modules/server_add/controllers/server_add.php | 1 + 1 file changed, 1 insertion(+) (limited to 'modules/server_add/controllers') diff --git a/modules/server_add/controllers/server_add.php b/modules/server_add/controllers/server_add.php index 3e460f20..715274ab 100644 --- a/modules/server_add/controllers/server_add.php +++ b/modules/server_add/controllers/server_add.php @@ -156,6 +156,7 @@ class Server_Add_Controller extends Admin_Controller { $entry_id = null; } + $file = preg_quote($file); foreach (glob("$file/*") as $child) { if (is_dir($child)) { $queue[] = array($child, $entry_id); -- cgit v1.2.3