diff --git a/wp-includes/functions.php b/wp-includes/functions.php index 1221684688..f5f01b0b8d 100644 --- a/wp-includes/functions.php +++ b/wp-includes/functions.php @@ -4353,6 +4353,9 @@ function iis7_supports_permalinks() { * @return int 0 means nothing is wrong, greater than 0 means something was wrong. */ function validate_file( $file, $allowed_files = '' ) { + // Normalize path for Windows servers + $file = wp_normalize_path( $file ); + if ( false !== strpos( $file, '..' ) ) return 1;