From e0bdda79ae9cbcc967eae76183d13fede114ac43 Mon Sep 17 00:00:00 2001 From: Sane Date: Sat, 22 Aug 2015 16:38:25 +0200 Subject: [PATCH] Fixed security issues. Opening *rw* is not required and causes security issues when using *secure.enable_security = true* in *minetest.config* --- mods/minetest-skins/skins/skinlist.lua | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/mods/minetest-skins/skins/skinlist.lua b/mods/minetest-skins/skins/skinlist.lua index 2fe1260..bb25771 100755 --- a/mods/minetest-skins/skins/skinlist.lua +++ b/mods/minetest-skins/skins/skinlist.lua @@ -7,7 +7,7 @@ local id id = 1 while true do - local f = io.open(minetest.get_modpath("skins").."/textures/player_"..id..".png") + local f = io.open(minetest.get_modpath("skins").."/textures/player_"..id..".png", "r") if (not f) then break end f:close() skins.add("player_"..id) @@ -16,7 +16,7 @@ end id = 1 while true do - local f = io.open(minetest.get_modpath("skins").."/textures/character_"..id..".png") + local f = io.open(minetest.get_modpath("skins").."/textures/character_"..id..".png", "r") if (not f) then break end f:close() skins.add("character_"..id)