Fix: Authenticated users can craft a POST request to delete any file on the webserver. Thank you @

bhopkins0
2026-02-28 02:44:53 +00:00 · 2023-05-12 15:24:57 -04:00
parent 51ee479130
commit e67a75805c
7 changed files with 30 additions and 13 deletions
--- a/settings_company.php
+++ b/settings_company.php
@@ -28,7 +28,6 @@ $company_initials = nullable_htmlentities(initials($company_name));
        </div>
        <div class="card-body">
            <form action="post.php" method="post" enctype="multipart/form-data" autocomplete="off">
-                <input type="hidden" name="existing_file_name" value="<?php echo $company_logo; ?>">

                <div class="form-group">
                    <label>Name <strong class="text-danger">*</strong></label>