Fix backups directory .htaccess deletion

mybb · May 1, 2024 · be4d223 · be4d223
1 parent b37b0c2
commit be4d223
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/admin/modules/tools/backupdb.php b/admin/modules/tools/backupdb.php
@@ -100,8 +100,9 @@ function clear_overflow($fp, &$contents)
 	}
 
 	$file = basename($mybb->input['file']);
+    $ext = get_extension($file);
 
-	if(!trim($mybb->input['file']) || !file_exists(MYBB_ADMIN_DIR.'backups/'.$file))
+    if(!trim($mybb->input['file']) || !file_exists(MYBB_ADMIN_DIR.'backups/'.$file) || filetype(MYBB_ADMIN_DIR.'backups/'.$file) != 'file' || ($ext != 'gz' && $ext != 'sql'))
 	{
 		flash_message($lang->error_backup_doesnt_exist, 'error');
 		admin_redirect("index.php?module=tools-backupdb");