dinislage/PrestaShop
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

[-] BO : Upload image name with trailing slash in name

Browse Source
This commit is contained in:
Gregory Roussac
2013-06-15 01:55:02 +02:00
parent 4e8c5a24df
commit ce9f262feb
3 changed files with 8 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files
admin-dev/ajaxfilemanager/ajax_file_upload.php
+2 -2
View File
@@ -60,7 +60,7 @@
$tem[$k] = $v; $tem[$k] = $v;
} }
$tem['path'] = backslashToSlash($path); $tem['path'] = addslashes(backslashToSlash($path));
$tem['type'] = "file"; $tem['type'] = "file";
$tem['size'] = transformFileSize($tem['size']); $tem['size'] = transformFileSize($tem['size']);
$tem['ctime'] = date(DATE_TIME_FORMAT, $tem['ctime']); $tem['ctime'] = date(DATE_TIME_FORMAT, $tem['ctime']);
@@ -73,7 +73,7 @@
$info .= sprintf(", %s:'%s'", $k, $v); $info .= sprintf(", %s:'%s'", $k, $v);
} }
$info .= sprintf(", url:'%s'", getFileUrl($path)); $info .= sprintf(", url:'%s'", addslashes(getFileUrl($path)));
$info .= sprintf(", tipedit:'%s'", TIP_DOC_RENAME); $info .= sprintf(", tipedit:'%s'", TIP_DOC_RENAME);
admin-dev/ajaxfilemanager/ajax_get_file_listing.php
+2 -2
View File
@@ -99,9 +99,9 @@
{ {
$v = transformFileSize($v); $v = transformFileSize($v);
} }
echo (($j++ > 1)?",":'') . "'" . $k . "':'" . $v . "'"; echo (($j++ > 1)?",":'') . "'" . addslashes($k) . "':'" . addslashes($v) . "'";
} }
echo (($j++ > 1)?",":'') . "'url':'" . getFileUrl($file['path']) . "'"; echo (($j++ > 1)?",":'') . "'url':'" . addslashes(getFileUrl($file['path'])) . "'";
echo "}\n"; echo "}\n";
} }
echo "};</script>\n"; echo "};</script>\n";
admin-dev/ajaxfilemanager/inc/class.file.php
+4 -4
View File
@@ -33,15 +33,15 @@
$this->fileInfo['atime'] = $this->fileStat[8]; $this->fileInfo['atime'] = $this->fileStat[8];
$this->fileInfo['ctime'] = $this->fileStat[10]; $this->fileInfo['ctime'] = $this->fileStat[10];
$this->fileInfo['mtime'] = $this->fileStat[9]; $this->fileInfo['mtime'] = $this->fileStat[9];
$this->fileInfo['path'] = $path; $this->fileInfo['path'] = addslashes($path);
$this->fileInfo['name'] = basename($path); $this->fileInfo['name'] = addslashes(basename($path));
$this->fileInfo['is_writable'] = $this->isWritable(); $this->fileInfo['is_writable'] = $this->isWritable();
$this->fileInfo['is_readable'] = $this->isReadable(); $this->fileInfo['is_readable'] = $this->isReadable();
}elseif(is_dir($this->filePath)) }elseif(is_dir($this->filePath))
{ {
$this->fileStat = @stat($path); $this->fileStat = @stat($path);
$this->fileInfo['name'] = basename($path); $this->fileInfo['name'] = addslashes(basename($path));
$this->fileInfo['path'] = $path; $this->fileInfo['path'] = addslashes($path);
$this->fileInfo['atime'] = $this->fileStat[8]; $this->fileInfo['atime'] = $this->fileStat[8];
$this->fileInfo['ctime'] = $this->fileStat[10]; $this->fileInfo['ctime'] = $this->fileStat[10];
$this->fileInfo['mtime'] = $this->fileStat[9]; $this->fileInfo['mtime'] = $this->fileStat[9];