Index: openacs-4/packages/acs-api-browser/www/content-page-view.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-api-browser/www/content-page-view.tcl,v diff -u -N -r1.3 -r1.3.14.1 --- openacs-4/packages/acs-api-browser/www/content-page-view.tcl 17 May 2003 09:38:28 -0000 1.3 +++ openacs-4/packages/acs-api-browser/www/content-page-view.tcl 25 Nov 2010 09:20:55 -0000 1.3.14.1 @@ -50,6 +50,11 @@ set filename "[acs_root_dir]/$path" +if {[regsub -all {[.][.]/} $filename "" shortened_filename]} { + ns_log notice "INTRUDER ALERT:\n\nsomesone tried to snarf '$filename'!\n file exists: [file exists $filename]\n user_id: [ad_conn user_id]\n peer: [ad_conn peeraddr]\n" + set filename shortened_filename +} + if {![file exists $filename] || [file isdirectory $filename]} { set file_contents "file '$filename' not found" } else {