Condition for filenames with spaces
This commit is contained in:
parent
b35f848fca
commit
9310d3d1d3
|
@ -1,7 +1,7 @@
|
||||||
<html>
|
<html>
|
||||||
<head>
|
<head>
|
||||||
|
|
||||||
<-- THIS ENTIRE FILE IS UNDER THE GNU AGPLv3+
|
<!-- THIS ENTIRE FILE IS UNDER THE GNU AGPLv3+
|
||||||
https://www.gnu.org/licenses/agpl-3.0.html -->
|
https://www.gnu.org/licenses/agpl-3.0.html -->
|
||||||
|
|
||||||
<link rel="stylesheet" type="text/css" href="../../res/bootstrap.css">
|
<link rel="stylesheet" type="text/css" href="../../res/bootstrap.css">
|
||||||
|
@ -34,8 +34,32 @@
|
||||||
|
|
||||||
|
|
||||||
<?php
|
<?php
|
||||||
|
|
||||||
|
// check if file-name has any... undesirable characteristics
|
||||||
|
|
||||||
|
$file_name = basename($_FILES["fileToUpload"]["name"]);
|
||||||
|
|
||||||
|
if (strstr($file_name, " "))
|
||||||
|
{
|
||||||
|
$file_name = str_replace(" ", "_", $file_name);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (strstr($file_name, ".."))
|
||||||
|
{
|
||||||
|
$file_name = str_replace("..", "_", $file_name);
|
||||||
|
}
|
||||||
|
|
||||||
|
if (strstr($file_name, "/"))
|
||||||
|
{
|
||||||
|
$file_name = str_replace("/", "_", $file_name);
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
// and now we pretend that never happened
|
||||||
|
|
||||||
$dest_dir = "p/";
|
$dest_dir = "p/";
|
||||||
$dest_file = $dest_dir . basename($_FILES["fileToUpload"]["name"]);
|
$dest_file = $dest_dir . $file_name;
|
||||||
|
|
||||||
$beaming_permitted = 1;
|
$beaming_permitted = 1;
|
||||||
|
|
||||||
if (file_exists($dest_file))
|
if (file_exists($dest_file))
|
||||||
|
|
Ŝarĝante…
Reference in New Issue