diff --git a/lib/image.php b/lib/image.php index 65521bd..b382971 100755 --- a/lib/image.php +++ b/lib/image.php @@ -186,7 +186,7 @@ function __errorHandler($errno=NULL, $errstr, $errfile=NULL, $errline=NULL, $err $param->background, $param->file, (bool)$param->external, - $_GET['param'] + General::sanitize($_GET['param']) ), E_NOTICE, true ); } @@ -325,8 +325,9 @@ function __errorHandler($errno=NULL, $errstr, $errfile=NULL, $errline=NULL, $err ) { // Guess not, return 404. Page::renderStatusCode(Page::HTTP_STATUS_NOT_FOUND); - trigger_error(sprintf('Image %s could not be found.', str_replace(DOCROOT, '', $original_file)), E_USER_ERROR); - echo sprintf('Image %s could not be found.', str_replace(DOCROOT, '', $original_file)); + $safeOriginalFile = General::sanitize(str_replace(DOCROOT, '', $original_file)); + trigger_error(sprintf('Image %s could not be found.', $safeOriginalFile, E_USER_ERROR)); + echo sprintf('Image %s could not be found.', $safeOriginalFile); exit; } $meta = Image::getMetaInformation($image_path);