From 27cb18bb0340103ff977ee58fce05a47ac74e8f2 Mon Sep 17 00:00:00 2001
From: chaideqing <chaideqing@easycorp.ltd>
Date: Thu, 23 Nov 2023 15:38:20 +0800
Subject: [PATCH] * Merge module-editor 18.4-18.8 to Merge184.

---
 module/editor/control.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/module/editor/control.php b/module/editor/control.php
index a04d94a69a..e6604a56fe 100644
--- a/module/editor/control.php
+++ b/module/editor/control.php
@@ -74,6 +74,7 @@ class editor extends control
         if($filePath)
         {
             $filePath = helper::safe64Decode($filePath);
+            $filePath = realpath($filePath);
             if(strpos(strtolower($filePath), strtolower($this->app->getBasePath())) !== 0) return print($this->lang->editor->editFileError);
             if($action == 'extendOther' and file_exists($filePath)) $this->view->showContent = file_get_contents($filePath);