Ignore:
Timestamp:
2007/07/10 22:12:44 (17 years ago)
Author:
adati
Message:

任意のドライブおよび、フォルダの画像ファイル等にアクセスが可能な脆弱性を修正

File:
1 edited

Legend:

Unmodified
Added
Removed

  • branches/rel/html/install/user_data/templates/default1/include/bloc/best5.tpl

    r12157 r15035  
    1515        <td> 
    1616         
    17         <!--{if $arrBestProducts[cnt].main_list_image != ""}--><!--{assign var=image_path value="`$smarty.const.IMAGE_SAVE_DIR`/`$arrBestProducts[cnt].main_list_image`"}--><!--{else}--><!--{assign var=image_path value="`$smarty.const.NO_IMAGE_DIR`"}--><!--{/if}--> 
     17        <!--{if $arrBestProducts[cnt].main_list_image != ""}--><!--{assign var=image_path value="`$arrBestProducts[cnt].main_list_image`"}--><!--{else}--><!--{assign var=image_path value="`$smarty.const.NO_IMAGE_DIR`"}--><!--{/if}--> 
    1818         
    1919        <table width="190" border="0" cellspacing="0" cellpadding="0" summary=" "> 
    … …  
    4848        <!--{assign var=cnt2 value=`$smarty.section.cnt.iteration*$smarty.section.cnt.step-1` }--> 
    4949        <!--{if $arrBestProducts[$cnt2]|count > 0}--> 
    50             <!--{if $arrBestProducts[$cnt2].main_list_image != ""}--><!--{assign var=image_path value="`$smarty.const.IMAGE_SAVE_DIR`/`$arrBestProducts[$cnt2].main_list_image`"}--><!--{else}--><!--{assign var=image_path value="`$smarty.const.NO_IMAGE_DIR`"}--><!--{/if}--> 
     50            <!--{if $arrBestProducts[$cnt2].main_list_image != ""}--><!--{assign var=image_path value="`$arrBestProducts[$cnt2].main_list_image`"}--><!--{else}--><!--{assign var=image_path value="`$smarty.const.NO_IMAGE_DIR`"}--><!--{/if}--> 
    5151            <table width="190" border="0" cellspacing="0" cellpadding="0" summary=" "> 
    5252                <tr valign="top"> 
Note: See TracChangeset for help on using the changeset viewer.