From 25cdee35e204bdefe4d1667477af4f916fb0e19f Mon Sep 17 00:00:00 2001
From: ProjectPatatoe <projectpaatt@gmail.com>
Date: Wed, 12 May 2021 16:51:13 -0700
Subject: [PATCH] keep within dir for deleting backups for #462

---
 system/admin/views/backup.html.php | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/system/admin/views/backup.html.php b/system/admin/views/backup.html.php
index 5968294..62df54f 100644
--- a/system/admin/views/backup.html.php
+++ b/system/admin/views/backup.html.php
@@ -3,7 +3,7 @@
 if (login()) {
     if (isset($_GET['file'])) {
         $file = _h($_GET['file']);
-
+        $file = preg_replace('/\/|\\\\/','0',$file);
         if (!empty($file)) {
             unlink("backup/$file");
         }