tonyair/silverstripe-framework
1
0
Fork 0
mirror of https://github.com/silverstripe/silverstripe-framework synced 2024-10-22 14:05:37 +02:00
Code Issues Projects Releases Wiki Activity

BUGFIX Validating $_FILES in Folder::addUploadToFolder() (Original patch was applied to Upload->validate() in trunk - r73254)

Browse Source 
git-svn-id: svn://svn.silverstripe.com/silverstripe/open/modules/sapphire/branches/2.2@73294 467b73ca-7a2a-4603-9d3b-597d59a354a9
This commit is contained in:
Sean Harvey 2009-03-18 03:27:21 +00:00 committed by Sam Minnee
parent c0b02a2828
commit 5f13d417ac
1 changed files with 5 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
filesystem/Folder.php
View File

@ -211,6 +211,11 @@ class Folder extends File {
return; return;
} }
if(isset($tmpFile['tmp_name']) && !is_uploaded_file($tmpFile['tmp_name'])) {
user_error("Folder::addUploadToFolder() File is not a valid upload", E_USER_ERROR);
return false;
}
$base = dirname(dirname($_SERVER['SCRIPT_FILENAME'])); $base = dirname(dirname($_SERVER['SCRIPT_FILENAME']));
// $parentFolder = Folder::findOrMake("Uploads"); // $parentFolder = Folder::findOrMake("Uploads");