@ -1191,7 +1191,7 @@ $EXT2MIME = [
"ice" => "x-conference/x-cooltalk",
];
$path = $_SERVER['REQUEST_URI'];
$path = explode('?', $_SERVER['REQUEST_URI'], 2)[0];
$dir = realpath(__DIR__ . $path);
if (strpos($dir, $ROOTPATH) !== 0) {
die("Access denied.");