Merge pull request #29011 from le-reparateur/patch-3

Update filefunc.inc.php
Dolibarr · Mar 23, 2024 · a7d982a · a7d982a
2 parents 7940b13 + 4e483e4
commit a7d982a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/htdocs/filefunc.inc.php b/htdocs/filefunc.inc.php
@@ -143,7 +143,8 @@ function dol_session_rotate($sessionname = '')
 $listofwrappers = stream_get_wrappers();
 // We need '.phar' for geoip2. TODO Replace phar in geoip with exploded files so we can disable phar by default.
 // phar stream does not auto unserialize content (possible code execution) since PHP 8.1
-$arrayofstreamtodisable = array('compress.zlib', 'compress.bzip2', 'ftp', 'ftps', 'glob', 'data', 'expect', 'ogg', 'rar', 'zip', 'zlib');
+// zip stream is necessary by excel import module
+$arrayofstreamtodisable = array('compress.zlib', 'compress.bzip2', 'ftp', 'ftps', 'glob', 'data', 'expect', 'ogg', 'rar', 'zlib');
 if (!empty($dolibarr_main_stream_to_disable) && is_array($dolibarr_main_stream_to_disable)) {
  $arrayofstreamtodisable = $dolibarr_main_stream_to_disable;
 }