X-Git-Url: http://git.pjr.cc/?p=quickshow.git;a=blobdiff_plain;f=show.php;h=6a753ab7e2553b3ad2bb1e5fc8ef814e4097b1c3;hp=701a30100c4f27a98db63e6bcedd98deb9007584;hb=30582442b37b136ea8dfecd7d2be98d59333748f;hpb=7d904297367824957461109d8f52e9f5f73e60fb diff --git a/show.php b/show.php index 701a301..6a753ab 100644 --- a/show.php +++ b/show.php @@ -6,14 +6,14 @@ */ #$show_dir = "/export/data/Pictures/showdir"; -$show_dir = "/home/paulr/lithium/data/Pictures/show"; +$show_dir = "/net/iron/export/quickshow/"; $n_per_line = 4; $this_url = "http://".$_SERVER["SERVER_NAME"].$_SERVER["REQUEST_URI"]; if(isset($_REQUEST["showpic"])) { // show the pic requested... - if(preg_match("/.*\\+.*/", $_REQUEST["showpic"])) { + if(preg_match("/.*\/+.*/", $_REQUEST["showpic"])) { header("Status: 403 i dont think so"); error_log("throwing 403"); return; @@ -28,7 +28,7 @@ if(isset($_REQUEST["showpic"])) { } } else if(isset($_REQUEST["showtmp"])) { // nothing yet - if(preg_match("/.*\\+.*/", $_REQUEST["showtmp"])) { + if(preg_match("/.*\/+.*/", $_REQUEST["showtmp"])) { error_log("throwing 403"); header("Status: 403 i dont think so"); return;