[SPIP] ~maj v3.2.9-->v3.2.11

[lhc/web/www.git] / www / plugins-dist / medias / lib / getid3 / module.archive.tar.php

diff --git a/www/plugins-dist/medias/lib/getid3/module.archive.tar.php b/www/plugins-dist/medias/lib/getid3/module.archive.tar.php
index 952a626..5b4aa56 100644 (file)
--- a/www/plugins-dist/medias/lib/getid3/module.archive.tar.php
+++ b/www/plugins-dist/medias/lib/getid3/module.archive.tar.php
@@ -19,6 +19,9 @@
 //                                                             //
 /////////////////////////////////////////////////////////////////
 
+if (!defined('GETID3_INCLUDEPATH')) { // prevent path-exposing attacks that access modules directly on public webservers
+       exit;
+}
 
 class getid3_tar extends getid3_handler
 {
@@ -44,13 +47,13 @@ class getid3_tar extends getid3_handler
                        // check the block
                        $checksum = 0;
                        for ($i = 0; $i < 148; $i++) {
-                               $checksum += ord($buffer{$i});
+                               $checksum += ord($buffer[$i]);
                        }
                        for ($i = 148; $i < 156; $i++) {
                                $checksum += ord(' ');
                        }
                        for ($i = 156; $i < 512; $i++) {
-                               $checksum += ord($buffer{$i});
+                               $checksum += ord($buffer[$i]);
                        }
                        $attr    = unpack($unpack_header, $buffer);
                        $name    =       (isset($attr['fname']  ) ? trim($attr['fname']  ) : '');