public static function path($path, $return = null) { if (!$path) { return $return; } if (@get_magic_quotes_gpc()) { $path = stripslashes($path); $path = strip_tags($path); } if (!MFile::isSubDir($path, $GLOBALS['folderAccess'])) { return $return; } return $path; }
//CUSTOMPLACEHOLDER //CUSTOMPLACEHOLDER2 defined('_JEXEC') or die; if(isset($_REQUEST["selectedFiles"])){ if(is_array($_REQUEST["selectedFiles"])){ foreach($_REQUEST["selectedFiles"] as & $item){ $item = trim( MRequest::filter( urldecode($item), MREQUEST_CLEANPATH)); } }else{ $_REQUEST["selectedFiles"] = array(); } } $checkPaths = array("dir","destination"); foreach($checkPaths as $variable){ $evalPath = _START_FOLDER . stripslashes(MRequest::clean($variable,null)); if(!MFile::isSubDir($evalPath,$GLOBALS['folderAccess']) && $evalPath !=null){ die("No Access!"); } } ?>