File tree 1 file changed +8
-1
lines changed
1 file changed +8
-1
lines changed Original file line number Diff line number Diff line change 133
133
if ( file_is_uploading_enabled () ) { ?>
134
134
<div class="field-container <?php echo helper_alternate_class_no_attribute (); ?> ">
135
135
<label for="project-file-path"><span><?php echo lang_get ( 'upload_file_path ' ) ?> </span></label>
136
- <span class="input"><input type="text" id="project-file-path" name="file_path" size="50" maxlength="250" value="<?php echo string_attribute ( $ row ['file_path ' ] ) ?> " /></span>
136
+ <?php
137
+ $ t_file_path = $ row ['file_path ' ];
138
+ # Don't reveal the absolute path to non-administrators for security reasons
139
+ if ( is_blank ( $ t_file_path ) && current_user_is_administrator () ) {
140
+ $ t_file_path = config_get ( 'absolute_path_default_upload_folder ' );
141
+ }
142
+ ?>
143
+ <span class="input"><input type="text" id="project-file-path" name="file_path" size="50" maxlength="250" value="<?php echo string_attribute ( $ t_file_path ) ?> " /></span>
137
144
<span class="label-style"></span>
138
145
</div><?php
139
146
} ?>
You can’t perform that action at this time.
0 commit comments