[Plugin: My FTP] security patch – restrict navigation to wordpress folder

MyFTP is a high security risk because it allow navigation through the whole webserver. Here is a security patch to restrict navigation to the wordpress folder:

@@ -154,6 +154,13 @@

   $pDir = pathinfo($dir);
   $parentDir = $pDir["dirname"];
+  /* nexus5 security patch */
+  function startsWith($haystack, $needle)
+  {
+    return strpos($haystack, $needle) === 0;
+  }
+  if (!startsWith($parentDir, get_home_path())) $parentDir = get_home_path();
+  /* nexus5 security patch */ 

 ?>
   <div id="subForm">

http://ww.wp.xz.cn/extend/plugins/myftp/