Check for a valid file

phpini/lang/en

@@ -20,6 +20,7 @@ manual_edata=No new contents entered
 
 list_title=Manage PHP Configuration
 list_ecannot=You are not allowed to manage this PHP configuration file
+list_efile=File to edit must be an absolute path
 list_return=PHP configuration
 list_format_ini=INI format
 list_format_fpm=FPM format

phpini/list_ini.cgi

@@ -3,6 +3,7 @@
 
 require './phpini-lib.pl';
 &ReadParse();
+$in{'file'} =~ /^\// || &error($text{'list_efile'});
 &can_php_config($in{'file'}) || &error($text{'list_ecannot'});
 
 # Work out if we can just see one file