Project

General

Profile

« Previous | Next » 

Revision 1476

Added by Dietmar almost 13 years ago

! optimize blacklist handling, add more separator ",#|;"
set of a wildcard ".*?" e.g. ph.*? proof ext like php, php3, php4 etc.
  1. fix sctrict warnings in media if default theme ist not Argos Theme
    + add new settings value in install, upgrade-script and core module

View differences:

rename2.php
2 2
/**
3 3
 *
4 4
 * @category        admin
5
 * @package         admintools
5
 * @package         media
6 6
 * @author          WebsiteBaker Project
7 7
 * @copyright       2004-2009, Ryan Djurovich
8 8
 * @copyright       2009-2011, Website Baker Org. e.V.
......
44 44
	$admin->print_error($MESSAGE['GENERIC_SECURITY_ACCESS'],$dirlink, false);
45 45
}
46 46

  
47
// Check for potentially malicious files and append 'txt' to their name
48
$rename_file_types  = str_replace(',','|',RENAME_FILES_ON_UPLOAD);
49
// hardcodet forbidden filetypes
50
$forbidden_file_types = 'phtml|php5|php4|php|cgi|pl|exe|com|bat|src|'.$rename_file_types;
47
// Check for potentially malicious files
48
$forbidden_file_types  = preg_replace( '/\s*[,;\|#]\s*/','|',RENAME_FILES_ON_UPLOAD);
51 49
// Get home folder not to show
52 50
$home_folders = get_home_folders();
53 51

  

Also available in: Unified diff