diff options
Diffstat (limited to 'p/ext.php')
| -rw-r--r-- | p/ext.php | 3 |
1 files changed, 2 insertions, 1 deletions
@@ -101,7 +101,8 @@ if (!isset($_GET['f']) || $file_name = urldecode($_GET['f']); $file_type = $_GET['t']; -if (empty(SUPPORTED_TYPES[$file_type])) { +if (empty(SUPPORTED_TYPES[$file_type]) || + empty(SUPPORTED_TYPES[pathinfo($file_name, PATHINFO_EXTENSION)])) { sendBadRequestResponse('File type is not supported.'); } |
