Changeset 15035 for branches/rel/data/Smarty/templates/admin/products/product_select.tpl

Timestamp:

2007/07/10 22:12:44 (17 years ago)

Author:

adati

Message:

任意のドライブおよび、フォルダの画像ファイル等にアクセスが可能な脆弱性を修正

File:

• branches/rel/data/Smarty/templates/admin/products/product_select.tpl (modified) (1 diff)

branches/rel/data/Smarty/templates/admin/products/product_select.tpl

@@ -100 +100 @@
             <td width="90" align="center">
             <!--{if $arrProducts[cnt].main_list_image != ""}-->
-                <!--{assign var=image_path value="`$smarty.const.IMAGE_SAVE_DIR`/`$arrProducts[cnt].main_list_image`"}-->
+                <!--{assign var=image_path value="`$arrProducts[cnt].main_list_image`"}-->
             <!--{else}-->
                 <!--{assign var=image_path value="`$smarty.const.NO_IMAGE_DIR`"}-->