issue #1073 prevents from making uploaded file executable

* for the name of the file in buffer directory, do not use the name given by the user, but the md5 of the name without extension * function add_uploaded_file deletes uploaded file if not expected
2026-06-02 04:15:05 +02:00 · 2019-09-20 16:26:21 +02:00
parent 7e154ab093
commit fa8996e10f
2 changed files with 6 additions and 0 deletions
@@ -237,11 +237,13 @@ SELECT
      }
      else
      {
+        unlink($source_filepath);
        die('unexpected file type');
      }
    }
    else
    {
+      unlink($source_filepath);
      die('forbidden file type');
    }