1 files changed, 5 insertions, 0 deletions

diff --git a/inc/functions.inc.php b/inc/functions.inc.php
index 6642e51..fed4b10 100644
--- a/inc/functions.inc.php
+++ b/inc/functions.inc.php
@@ -31,6 +31,11 @@ function validate_get($value, $type) {
 }
 
 function validateRRDPath($base, $path) {
+        $base = preg_replace('/\/$/', '', $base);
+
+        # resolve possible symlink
+        $base = realpath($base);
+
         $realpath = realpath(sprintf('%s/%s', $base, $path));
 
         if (strpos($realpath, $base) === false)