summaryrefslogtreecommitdiff
path: root/img_auth.php
diff options
context:
space:
mode:
authorPierre Schmitz <pierre@archlinux.de>2011-04-17 11:49:55 +0200
committerPierre Schmitz <pierre@archlinux.de>2011-04-17 11:49:55 +0200
commit75abb5292328bdb07a91ad7229a121ab3446569d (patch)
tree8eb38499cf9dc3a3a413c44ebad4463099f59e54 /img_auth.php
parent124299758ca7454561118f466a0470905758924f (diff)
update to MediaWiki 1.16.4
Diffstat (limited to 'img_auth.php')
-rw-r--r--img_auth.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/img_auth.php b/img_auth.php
index 534d1fd2..26ba9413 100644
--- a/img_auth.php
+++ b/img_auth.php
@@ -39,7 +39,7 @@ if ( $wgImgAuthPublicTest
// Check for bug 28235: QUERY_STRING overriding the correct extension
if ( isset( $_SERVER['QUERY_STRING'] )
- && preg_match( '/\.[a-z]{1,4}$/i', $_SERVER['QUERY_STRING'] ) )
+ && preg_match( '/\.[a-z0-9]{1,4}(#|\?|$)/i', $_SERVER['QUERY_STRING'] ) )
{
wfForbidden( 'img-auth-accessdenied', 'img-auth-bad-query-string' );
}