Skip to content

Commit 2e5c004

Browse files
committed
Add disable_dangerous_file in unzip_uploaded_file
1 parent a2fabca commit 2e5c004

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

main/inc/lib/fileUpload.lib.php

+2
Original file line numberDiff line numberDiff line change
@@ -1081,6 +1081,8 @@ function unzip_uploaded_file($uploaded_file, $upload_path, $base_work_dir, $max_
10811081
}
10821082

10831083
$safe_file = api_replace_dangerous_char($file);
1084+
$safe_file = disable_dangerous_file($safe_file);
1085+
10841086
@rename($base_work_dir.$upload_path.'/'.$file, $base_work_dir.$upload_path.'/'.$safe_file);
10851087
set_default_settings($upload_path, $safe_file, $filetype);
10861088
}

0 commit comments

Comments
 (0)