richard
/
sorbetcms
1
0
Fork 1
Code Issues Pull Requests Releases Wiki Activity

Full fix for issue #43

master
pecesama 2007-09-23 22:36:19 +00:00
parent aae90554cf
commit 6f8f1924b3
2 changed files with 6 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
admin/index.php
View File

@ -40,7 +40,7 @@ if ($user->isAdmin()) {
header("Location: ".$conf->urlGelato."/admin/index.php?photo=false");
die();
}
$_POST["url"] = "../uploads/".$photoName;
$_POST["url"] = "../uploads/".sanitizeName($photoName);
}
if ( move_uploaded_file( $_FILES['photo']['tmp_name'], "../uploads/".sanitizeName($_FILES['photo']['name']) ) ) {

5
classes/functions.php
View File

@ -85,12 +85,15 @@ if(!defined('entry') || !entry) die('Not a valid page');
}
function getFile($remoteFileName) {
$fileName = "../uploads/".sanitizeName($remoteFileName);
$fileName = "../uploads/".sanitizeName(getFileName($remoteFileName));
$str = _file_get_contents($remoteFileName);
if (!$handle = fopen($fileName, 'w')) {
//die("no se abrio de escritura");
return false;
}
if (fwrite($handle, $str) === FALSE) {
//die("no se escribio");
return false;
}
fclose($handle);