diff --git a/app/controllers/general.php b/app/controllers/general.php index 9450a5fd55..afe9a5f5e2 100644 --- a/app/controllers/general.php +++ b/app/controllers/general.php @@ -552,8 +552,11 @@ App::get('/.well-known/acme-challenge') throw new Exception('Invalid challenge token.', 400); } + $filePath = '/.well-known/acme-challenge' . $token; + $base = \realpath(APP_STORAGE_CERTIFICATES); - $absolute = \realpath($base.'/.well-known/acme-challenge/'.$token); + $path = \str_replace('/.well-known/acme-challenge/', '', $filePath); + $absolute = \realpath($base.'/.well-known/acme-challenge/'.$path); if (!$base) { throw new Exception('Storage error', 500, Exception::GENERAL_SERVER_ERROR);