diff --git a/CHANGELOG.md b/CHANGELOG.md index 69fbaab5..ac3e91c5 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -6,6 +6,7 @@ * Removed duplicate lang strings 1. [](#bugfix) * Fix XSS checking when empty content [#1533](https://github.com/getgrav/grav-plugin-admin/issues/1533) + * Fix DirectInstall not working [#1535](https://github.com/getgrav/grav-plugin-admin/issues/1535) # v1.8.11 ## 10/08/2018 diff --git a/classes/admincontroller.php b/classes/admincontroller.php index fb30ddb9..4e0932e2 100644 --- a/classes/admincontroller.php +++ b/classes/admincontroller.php @@ -2288,7 +2288,7 @@ class AdminController extends AdminBaseController $file_path = $_FILES['uploaded_file']['tmp_name']; // Handle bad filenames. - if (!Utils::checkFilename($file_path)) { + if (!Utils::checkFilename(basename($file_path))) { $this->admin->json_response = [ 'status' => 'error', 'message' => $this->admin->translate('PLUGIN_ADMIN.UNKNOWN_ERRORS')