jadedctrl/insert-coin
jadedctrl/ insert-coin
1
0
Disbranĉigi 0
Fontkodo Issues Tirpetoj 2 Actions Packages Projects Eldonoj Wiki Activity

Condition for filenames with spaces

This commit is contained in:
Jade Levesque 2017-12-03 22:20:10 -06:00
parent b35f848fca
commit 9310d3d1d3
1 changed files with 26 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

28
files/beam.php
View File

@ -1,7 +1,7 @@
<html> <html>
<head> <head>
<-- THIS ENTIRE FILE IS UNDER THE GNU AGPLv3+ <!-- THIS ENTIRE FILE IS UNDER THE GNU AGPLv3+
https://www.gnu.org/licenses/agpl-3.0.html --> https://www.gnu.org/licenses/agpl-3.0.html -->
<link rel="stylesheet" type="text/css" href="../../res/bootstrap.css"> <link rel="stylesheet" type="text/css" href="../../res/bootstrap.css">
@ -34,8 +34,32 @@
<?php <?php
// check if file-name has any... undesirable characteristics
$file_name = basename($_FILES["fileToUpload"]["name"]);
if (strstr($file_name, " "))
{
$file_name = str_replace(" ", "_", $file_name);
}
if (strstr($file_name, ".."))
{
$file_name = str_replace("..", "_", $file_name);
}
if (strstr($file_name, "/"))
{
$file_name = str_replace("/", "_", $file_name);
}
// and now we pretend that never happened
$dest_dir = "p/"; $dest_dir = "p/";
$dest_file = $dest_dir . basename($_FILES["fileToUpload"]["name"]); $dest_file = $dest_dir . $file_name;
$beaming_permitted = 1; $beaming_permitted = 1;
if (file_exists($dest_file)) if (file_exists($dest_file))