Welcome to mirror list, hosted at ThFree Co, Russian Federation.

github.com/jappix/jappix.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorValérian Saliou <valerian@valeriansaliou.name>2015-08-07 14:31:10 +0300
committerValérian Saliou <valerian@valeriansaliou.name>2015-08-07 14:31:10 +0300
commit690d6bfe5fce234c1f6187d5a348ccc6e1b6eb88 (patch)
tree80d0f757ac125477703ac78da9eb8ea3e7683dce
parent319eaf3f7e9224dfc5d172542c1f621aab94be46 (diff)
Fix safe check
Signed-off-by: Valérian Saliou <valerian@valeriansaliou.name>
-rw-r--r--server/file-share.php2
1 files changed, 1 insertions, 1 deletions
diff --git a/server/file-share.php b/server/file-share.php
index 0981be47..1f34e35a 100644
--- a/server/file-share.php
+++ b/server/file-share.php
@@ -61,7 +61,7 @@ if((isset($_FILES['file']) && !empty($_FILES['file'])) && (isset($_POST['user'])
$thumb_xml = '';
// Forbidden file?
- if(!isSafeAllowed($user) || !isSafeAllowed($filename) || !isSafeAllowed($name.'.'.$ext)) {
+ if(!isSafe($user) || !isSafeAllowed($filename) || !isSafeAllowed($name.'.'.$ext)) {
exit(
'<jappix xmlns=\'jappix:file:post\'>
<error>forbidden-type</error>