Régularisation de commits manquants

web/tinymce/filemanager/force_download.php

@@ -0,0 +1,30 @@
+<?php
+include('config/config.php');
+if($_SESSION['RF']["verify"] != "RESPONSIVEfilemanager") die('forbiden');
+include('include/utils.php');
+
+if(strpos($_POST['path'],'/')===0
+    || strpos($_POST['path'],'../')!==FALSE
+    || strpos($_POST['path'],'./')===0)
+    die('wrong path');
+
+if(strpos($_POST['name'],'/')!==FALSE)
+    die('wrong path');
+
+$path=$current_path.$_POST['path'];
+$name=$_POST['name'];
+
+$info=pathinfo($name);
+if(!in_array(fix_strtolower($info['extension']), $ext)){
+    die('wrong extension');
+}
+
+header('Pragma: private');
+header('Cache-control: private, must-revalidate');
+header("Content-Type: application/octet-stream");
+header("Content-Length: " .(string)(filesize($path.$name)) );
+header('Content-Disposition: attachment; filename="'.($name).'"');
+readfile($path.$name);
+
+exit;
+?>