minor (security) edit

arturo-lang · Nov 14, 2023 · 71d55dc · 71d55dc
1 parent fb1d9a5
commit 71d55dc
Showing 1 changed file with 17 additions and 15 deletions.
diff --git a/website/download.php b/website/download.php
@@ -5,23 +5,25 @@
 $mgk = $_GET["mgk"];
 
 if (($pkg != "") && ($ver != "") && ($mgk == "18966")) {
-    $filename = "/var/www/pkg_stats/" . $pkg . "-" . $ver . ".cnt";
-    $cnt = 0;
-    if (file_exists($filename)){
-        $cnt = intval(file_get_contents($filename));
-    }
-    else {
-        touch($filename);
-        chmod($filename, 0777);
-    }
-    $cnt = $cnt + 1;
+    if ((is_dir("/var/www/pkgr.art/public/" . $pkg)) && 
+        (is_dir("/var/www/pkgr.art/public/" . $pkg . "/" . $ver))) {
+        $filename = "/var/www/pkg_stats/" . $pkg . "-" . $ver . ".cnt";
+        $cnt = 0;
+        if (file_exists($filename)){
+            $cnt = intval(file_get_contents($filename));
+        }
+        else {
+            touch($filename);
+            chmod($filename, 0777);
+        }
+        $cnt = $cnt + 1;
 
-    $openFile = fopen($filename, "w+") or die("Can't open file");
-    fwrite($openFile, strval($cnt));
-    fclose($openFile);
-    fclose($myfile); 
+        $openFile = fopen($filename, "w+") or die("Can't open file");
+        fwrite($openFile, strval($cnt));
+        fclose($openFile);
 
-    echo $cnt;  
+        echo $cnt;  
+    }
 }
 
 ?>