DiskCache: more strict checking for input filenames, getUrl() is no longer static

1 files changed, 1 insertions, 7 deletions

diff --git a/classes/handler/public.php b/classes/handler/public.php
index 901844e36..4c904231e 100755
--- a/classes/handler/public.php
+++ b/classes/handler/public.php
@@ -1202,13 +1202,7 @@ class Handler_Public extends Handler {
 	}
 
 	function cached_url() {
-		$filename = $_GET['file'];
-
-		if (strpos($filename, "/") !== FALSE) {
-			list ($cache_dir, $filename) = explode("/", $filename, 2);
-		} else {
-			$cache_dir = "images";
-		}
+		list ($cache_dir, $filename) = explode("/", $_GET["file"], 2);
 
 		$cache = new DiskCache($cache_dir);