fixed server security issue concerning deck deletion

This commit is contained in:
Max-Wilhelm Bruker 2012-05-22 21:43:22 +02:00
parent 0a30f22e5f
commit 887ee0e86d

View file

@ -361,7 +361,7 @@ ResponseCode ServerSocketInterface::cmdDeckDelDir(Command_DeckDelDir *cmd, Comma
servatrice->checkSql();
int basePathId = getDeckPathId(cmd->getPath());
if (basePathId == -1)
if ((basePathId == -1) || (basePathId == 0))
return RespNameNotFound;
deckDelDirHelper(basePathId);
return RespOk;