strip some tags
This commit is contained in:
parent
3465b5926e
commit
32cba5812d
4 changed files with 4 additions and 4 deletions
|
@ -3,7 +3,7 @@
|
||||||
"allowErrors": false
|
"allowErrors": false
|
||||||
},
|
},
|
||||||
"dest": "dist",
|
"dest": "dist",
|
||||||
"pkgVersion": "1.5.1",
|
"pkgVersion": "1.5.2",
|
||||||
"banners": [
|
"banners": [
|
||||||
"banners/malware_scans.swig",
|
"banners/malware_scans.swig",
|
||||||
"banners/donations.swig"
|
"banners/donations.swig"
|
||||||
|
|
|
@ -1,6 +1,6 @@
|
||||||
{
|
{
|
||||||
"name": "uguu",
|
"name": "uguu",
|
||||||
"version": "1.5.1",
|
"version": "1.5.2",
|
||||||
"description": "Kawaii file host",
|
"description": "Kawaii file host",
|
||||||
"homepage": "https://uguu.se/",
|
"homepage": "https://uguu.se/",
|
||||||
"repository": {
|
"repository": {
|
||||||
|
|
|
@ -347,7 +347,7 @@ namespace Core {
|
||||||
'VALUES (:hash, :orig, :name, :size, :date, :ip)'
|
'VALUES (:hash, :orig, :name, :size, :date, :ip)'
|
||||||
);
|
);
|
||||||
$q->bindValue(':hash', Upload::$SHA1, PDO::PARAM_STR);
|
$q->bindValue(':hash', Upload::$SHA1, PDO::PARAM_STR);
|
||||||
$q->bindValue(':orig', strip_tags(Upload::$FILE_NAME), PDO::PARAM_STR);
|
$q->bindValue(':orig', Upload::$FILE_NAME, PDO::PARAM_STR);
|
||||||
$q->bindValue(':name', Upload::$NEW_NAME_FULL, PDO::PARAM_STR);
|
$q->bindValue(':name', Upload::$NEW_NAME_FULL, PDO::PARAM_STR);
|
||||||
$q->bindValue(':size', Upload::$FILE_SIZE, PDO::PARAM_INT);
|
$q->bindValue(':size', Upload::$FILE_SIZE, PDO::PARAM_INT);
|
||||||
$q->bindValue(':date', time(), PDO::PARAM_STR);
|
$q->bindValue(':date', time(), PDO::PARAM_STR);
|
||||||
|
|
|
@ -45,7 +45,7 @@ class Upload
|
||||||
$files = self::diverseArray($files);
|
$files = self::diverseArray($files);
|
||||||
|
|
||||||
foreach ($files as $file) {
|
foreach ($files as $file) {
|
||||||
self::$FILE_NAME = $file['name'];
|
self::$FILE_NAME = strip_tags($file['name']);
|
||||||
self::$FILE_SIZE = $file['size'];
|
self::$FILE_SIZE = $file['size'];
|
||||||
self::$TEMP_FILE = $file['tmp_name'];
|
self::$TEMP_FILE = $file['tmp_name'];
|
||||||
self::$SHA1 = sha1_file(self::$TEMP_FILE);
|
self::$SHA1 = sha1_file(self::$TEMP_FILE);
|
||||||
|
|
Loading…
Add table
Reference in a new issue