mirrors/Piwigo
1
0
Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2025-04-28 04:09:56 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

issue #1073 prevents from making uploaded file executable

Browse source 
* for the name of the file in buffer directory, do not use the name given by the user, but the md5 of the name without extension
* function add_uploaded_file deletes uploaded file if not expected
This commit is contained in:
plegall 2019-09-20 16:26:21 +02:00
parent 7e154ab093
commit fa8996e10f
2 changed files with 6 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

2
admin/include/functions_upload.inc.php
View file

@ -237,11 +237,13 @@ SELECT
}
else
{
unlink($source_filepath);
die('unexpected file type');
}
}
else
{
unlink($source_filepath);
die('forbidden file type');
}