Add some page template validation

git-svn-id: http://svn.automattic.com/wordpress/trunk@7921 1a063a9b-81f0-0310-95a4-ce76da25c4cd
2008-05-12 23:51:54 +00:00
parent 9830ab988c
commit dcf35ab2ed
3 changed files with 17 additions and 17 deletions
--- a/wp-includes/functions.php
+++ b/wp-includes/functions.php
@@ -1749,4 +1749,20 @@ function apache_mod_loaded($mod, $default = false) {
 	return $default;
 }

+function validate_file( $file, $allowed_files = '' ) {
+	if ( false !== strpos( $file, '..' ))
+		return 1;
+
+	if ( false !== strpos( $file, './' ))
+		return 1;
+
+	if (':' == substr( $file, 1, 1 ))
+		return 2;
+
+	if (!empty ( $allowed_files ) && (!in_array( $file, $allowed_files ) ) )
+		return 3;
+
+	return 0;
+}
+
 ?>