Return a 404 if api/file/sequence called directly with no file

FalconChristmas · Dec 24, 2024 · 99b25c3 · 99b25c3
1 parent 502ffc3
commit 99b25c3
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/www/api/controllers/files.php b/www/api/controllers/files.php
@@ -385,7 +385,8 @@ function GetFileImpl($dir, $filename, $lines, $play, $attach)
         $filename = substr($filename, 8);
     }
 
-    if (!file_exists($dir . '/' . $filename)) {
+    if (!file_exists($dir . '/' . $filename) || !is_file($dir . '/' . $filename)) {
+        http_response_code(404);
         echo "File $dir/$filename does not exist.";
         return;
     }