Correctly urlencode path in setcookie(); fix #3538 (#3561)

Some characters are valid in URLs but not in cookies, eg. comma or semicolon. They needs to be encoded properly.
Studio-42 · Jun 2, 2023 · 34dcd44 · 34dcd44
1 parent ca888c1
commit 34dcd44
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/php/elFinder.class.php b/php/elFinder.class.php
@@ -2082,7 +2082,7 @@ protected function file($args)
         }
 
         if ($args['cpath'] && $args['reqid']) {
-            setcookie('elfdl' . $args['reqid'], '1', 0, $args['cpath']);
+            setcookie('elfdl' . $args['reqid'], '1', 0, urlencode($args['cpath']));
         }
 
         $result = array(