]> git.mjollnir.org Git - s9y.git/commit
This should fix the image upload bug for good. Uses basename() and upload verificatio...
authorgarvinhicking <garvinhicking>
Fri, 13 May 2005 11:04:42 +0000 (11:04 +0000)
committergarvinhicking <garvinhicking>
Fri, 13 May 2005 11:04:42 +0000 (11:04 +0000)
commitf899929029d33201e866171c68e3470b6474fc21
treeff613de0698c367814227da77a4b9f5edd08fb03
parentab08dff996a96fab8d60263317258d4ee8462f83
This should fix the image upload bug for good. Uses basename() and upload verification before any checks are done.
Also admins can no longer upload active content files.

Tricking the upload by making the directory "evil.ph" and the filename "p" does not work because trailing slashes are appended to directory names.
include/admin/images.inc.php
include/functions_images.inc.php