Project

General

Profile

« Previous | Next » 

Revision 1476

Added by Dietmar almost 13 years ago

! optimize blacklist handling, add more separator ",#|;"
set of a wildcard ".*?" e.g. ph.*? proof ext like php, php3, php4 etc.
  1. fix sctrict warnings in media if default theme ist not Argos Theme
    + add new settings value in install, upgrade-script and core module

View differences:

rename.php
2 2
/**
3 3
 *
4 4
 * @category        admin
5
 * @package         admintools
5
 * @package         media
6 6
 * @author          WebsiteBaker Project
7 7
 * @copyright       2004-2009, Ryan Djurovich
8 8
 * @copyright       2009-2011, Website Baker Org. e.V.
......
45 45

  
46 46
// Get home folder not to show
47 47
$home_folders = get_home_folders();
48
// Check for potentially malicious files and append 'txt' to their name
49
$rename_file_types  = str_replace(',','|',RENAME_FILES_ON_UPLOAD);
50
// hardcodet forbidden filetypes
51
$forbidden_file_types = 'phtml|php5|php4|php|cgi|pl|exe|com|bat|src|'.$rename_file_types;
48
// Check for potentially malicious files
49
$forbidden_file_types  = preg_replace( '/\s*[,;\|#]\s*/','|',RENAME_FILES_ON_UPLOAD);
52 50

  
53 51
// Figure out what folder name the temp id is
54 52
if($handle = opendir(WB_PATH.MEDIA_DIRECTORY.'/'.$directory)) {

Also available in: Unified diff