diff --git a/plugins/dynamix.plugin.manager/include/ShowChanges.php b/plugins/dynamix.plugin.manager/include/ShowChanges.php index be807c571..ee4e8080c 100644 --- a/plugins/dynamix.plugin.manager/include/ShowChanges.php +++ b/plugins/dynamix.plugin.manager/include/ShowChanges.php @@ -23,9 +23,9 @@ require_once "$docroot/webGui/include/Markdown.php";
$file = $_GET['file']; -$tmp = $_GET['tmp'] ?? '/tmp/plugins/'; +$tmp = $_GET['tmp'] ? '/var/tmp' : '/tmp/plugins/'; -if (file_exists($file) && strpos(realpath($file),$tmp) === 0 && substr($file, -4) == '.txt') echo Markdown(file_get_contents($file)); else echo Markdown("*No release notes available!*"); +if (file_exists($file) && strpos(realpath($file),$tmp)===0 && substr($file, -4)=='.txt') echo Markdown(file_get_contents($file)); else echo Markdown("*No release notes available!*"); ?>