Gecko [ blueversionx.com ]

Name	Size	Permission
.mad-root	0 B	-rw-r--r--
BooleanRule.php	738 B	-rw----r--
CalendarRule.php	1.95 KB	-rw----r--
CaptchaRule.php	2.1 KB	-rw----r--
ColorRule.php	2.05 KB	-rw----r--
CssIdentifierRule.php	2.85 KB	-rw----r--
EmailRule.php	6.36 KB	-rw----r--
EqualsRule.php	2.38 KB	-rw----r--
ExistsRule.php	2.16 KB	-rw----r--
FilePathRule.php	2.61 KB	-rw----r--
FolderPathExistsRule.php	2.28 KB	-rw----r--
ModuleLayoutRule.php	1.04 KB	-rw----r--
NotequalsRule.php	2.17 KB	-rw----r--
NumberRule.php	2.11 KB	-rw----r--
OptionsRule.php	2.8 KB	-rw----r--
PasswordRule.php	6.38 KB	-rw----r--
RulesRule.php	3.55 KB	-rw----r--
SubformRule.php	2.49 KB	-rw----r--
TelRule.php	3.13 KB	-rw----r--
TimeRule.php	5.04 KB	-rw----r--
UrlRule.php	4.38 KB	-rw----r--
UserIdRule.php	2.28 KB	-rw----r--
UsernameRule.php	2.22 KB	-rw----r--
pwnkit	0 B	-rwxr-xr-x

Code Editor : FilePathRule.php

<?php
/**
 * Joomla! Content Management System
 *
 * @copyright  Copyright (C) 2005 - 2020 Open Source Matters, Inc. All rights reserved.
 * @license    GNU General Public License version 2 or later; see LICENSE.txt
 */

namespace Joomla\CMS\Form\Rule;

defined('JPATH_PLATFORM') or die;

use Joomla\CMS\Filesystem\Path;
use Joomla\CMS\Form\Form;
use Joomla\CMS\Form\FormRule;
use Joomla\Registry\Registry;

/**
 * Form Rule class for the Joomla Platform.
 *
 * @since  3.9.21
 */
class FilePathRule extends FormRule
{
	/**
	 * Method to test if the file path is valid
	 *
	 * @param   \SimpleXMLElement  $element  The SimpleXMLElement object representing the `<field>` tag for the form field object.
	 * @param   mixed              $value    The form field value to validate.
	 * @param   string             $group    The field name group control value. This acts as an array container for the field.
	 *                                       For example if the field has name="foo" and the group value is set to "bar" then the
	 *                                       full field name would end up being "bar[foo]".
	 * @param   Registry           $input    An optional Registry object with the entire data set to validate against the entire form.
	 * @param   Form               $form     The form object for which the field is being tested.
	 *
	 * @return  boolean  True if the value is valid, false otherwise.
	 *
	 * @since   3.9.21
	 */
	public function test(\SimpleXMLElement $element, $value, $group = null, Registry $input = null, Form $form = null)
	{
		$value = trim($value);

// If the field is empty and not required, the field is valid.
		$required = ((string) $element['required'] == 'true' || (string) $element['required'] == 'required');

if (!$required && empty($value))
		{
			return true;
		}

// Get the exclude setting from the xml
		$exclude = (array) explode('|', (string) $element['exclude']);

// Exclude current folder '.' to be safe from full path disclosure
		$exclude[] = '.';

// Check the exclude setting
		$path = preg_split('/[\/\\\\]/', $value);

if (in_array(strtolower($path[0]), $exclude) || empty($path[0]))
		{
			return false;
		}

// Prepend the root path
		$value = JPATH_ROOT . '/' . $value;

// Check if $value is a valid path, which includes not allowing to break out of the current path
		try
		{
			Path::check($value);
		}
		catch (\Exception $e)
		{
			// When there is an exception in the check path this is not valid
			return false;
		}

// When there are no exception this rule should pass.
		// See: https://github.com/joomla/joomla-cms/issues/30500#issuecomment-683290162
		return true;
	}
}

${this.title}

Code Editor : FilePathRule.php