fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-04-27 14:22:54 +09:00
Code Issues Projects Releases Packages Wiki Activity

xss defense change

Browse source 
git-svn-id: http://xe-core.googlecode.com/svn/branches/1.5.0@10227 201d5d3c-b55e-5fd7-737f-ddc643e51545
This commit is contained in:
ovclas 2012-02-28 05:18:21 +00:00
parent ab274266c5
commit 2634244f96
2 changed files with 1 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

1
classes/context/Context.class.php
View file

@ -758,6 +758,7 @@ class Context {
foreach($_FILES as $key => $val) {
$tmp_name = $val['tmp_name'];
if(!$tmp_name || !is_uploaded_file($tmp_name)) continue;
$val['name'] = htmlspecialchars($val['name']);
$this->set($key, $val, true);
$this->is_uploaded = true;
}