Fix to treat variables as literals in glob

(protect from any spaces and other special characters)
webmin · Nov 6, 2023 · b9023a8 · b9023a8
1 parent be124be
commit b9023a8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/extensions/file-manager/delete.cgi b/extensions/file-manager/delete.cgi
@@ -55,7 +55,7 @@ foreach my $name (@entries_list) {
         my $tfile;
         if (!$mkpathr && -f "$tdir/$name" && -r "$tdir/$name") {
             $tfile = "$tdir/$name-$time";
-        } elsif (!$mkpathr && glob("$tdir/$name/*")) {
+        } elsif (!$mkpathr && glob("\Q$tdir/$name\E/*")) {
             $tfile = "$tdir/$name-$time";
             &$mkpath_($tdir);
         }