mirror of
https://github.com/Piwigo/Piwigo.git
synced 2026-06-02 04:15:05 +02:00
fixes #600, avoid html in web uploaded filenames
This commit is contained in:
@@ -161,6 +161,11 @@ function add_uploaded_file($source_filepath, $original_filename=null, $categorie
|
||||
|
||||
global $conf, $user;
|
||||
|
||||
if (!is_null($original_filename))
|
||||
{
|
||||
$original_filename = htmlspecialchars($original_filename);
|
||||
}
|
||||
|
||||
if (isset($original_md5sum))
|
||||
{
|
||||
$md5sum = $original_md5sum;
|
||||
|
||||
Reference in New Issue
Block a user