PsychoticNinja/Stikked
1
0
Fork 0
mirror of https://github.com/claudehohl/Stikked.git synced 2025-04-25 12:31:06 -05:00
Code Issues Projects Releases Wiki Activity

Merge pull request #106 from RamadhanAmizudin/master

Browse Source 
Update theme_assets.php
This commit is contained in:
Claude 2013-11-04 05:10:20 -08:00
commit 3d9f22ef48
1 changed files with 12 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
htdocs/application/controllers/theme_assets.php
View File

@ -23,7 +23,7 @@ class Theme_assets extends CI_Controller
function css()
{
$css_file = $this->uri->segment(4);
$css_file = basename( $css_file ); // Fix LFI Vulnerability
//file path
$file_path = 'themes/' . $this->theme . '/css/' . $css_file;
@ -34,6 +34,11 @@ class Theme_assets extends CI_Controller
$file_path = 'themes/default/css/' . $css_file;
}
// Double checking file
if( !file_exists( $file_path ) ) {
return false;
}
//send
header('Content-type: text/css');
$this->_expires_header(1);
@ -43,7 +48,7 @@ class Theme_assets extends CI_Controller
function images()
{
$image_file = $this->uri->segment(4);
$image_file = basename( $image_file );
//file path
$file_path = 'themes/' . $this->theme . '/images/' . $image_file;
@ -54,6 +59,10 @@ class Theme_assets extends CI_Controller
$file_path = 'themes/default/images/' . $image_file;
}
// double checking file
if( !file_exists( $file_path ) ) {
return false;
}
//send
$size = getimagesize($file_path);
header('Content-type: ' . $size['mime']);