From fd8e56db5a99cce1cd662b738def6421f7ae5cc0 Mon Sep 17 00:00:00 2001 From: Retro_Guy Date: Fri, 9 Jul 2021 10:12:56 +0000 Subject: [PATCH] Fix hardcoded spooldir in upload.php --- Rocksolid_Light/spoolnews/upload.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Rocksolid_Light/spoolnews/upload.php b/Rocksolid_Light/spoolnews/upload.php index 8ae3a49..7e1576d 100644 --- a/Rocksolid_Light/spoolnews/upload.php +++ b/Rocksolid_Light/spoolnews/upload.php @@ -47,7 +47,7 @@ if(isset($_FILES)) { // Check auth here if(isset($_POST['key']) && password_verify($CONFIG['thissitekey'].$_POST['username'], $_POST['key'])) { if(check_bbs_auth($_POST['username'], $_POST['password'])) { - $userdir = '/var/spool/rslight/upload/'.strtolower($_POST[username]); + $userdir = $spooldir.'/upload/'.strtolower($_POST[username]); $upload_to = $userdir.'/'.$_FILES[photo][name]; if(is_file($upload_to)) { echo $_FILES[photo][name].' already exists in your folder';