diff --git a/C4/Auth.pm b/C4/Auth.pm index 851dc69bb0..1d3482e87e 100644 --- a/C4/Auth.pm +++ b/C4/Auth.pm @@ -140,7 +140,7 @@ sub get_template_and_user { my ( $user, $cookie, $sessionID, $flags ); my $safe_chars = 'a-zA-Z0-9_\-\/'; - die "bad template path" if $in->{'template_name'} && $in->{'template_name'} !~ m/^[$safe_chars]+\.(tt|tmpl)$/ig; #sanitize input + die "bad template path" unless $in->{'template_name'} =~ m/^[$safe_chars]+.tt?$/ig; #sanitize input $in->{'authnotrequired'} ||= 0; my $template = C4::Templates::gettemplate(