修正任意文件被删除的bug

src/admin/file_class.php

@@ -145,6 +145,7 @@ class FileManagement
      */
     function DeleteFile($filename)
     {
+        $filename = str_replace("..", "", $filename);
         $filename = $this->baseDir.$this->activeDir."/$filename";
         if (is_file($filename)) {
             @unlink($filename);