mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-07-12 18:46:20 +02:00
Code Issues Releases Wiki Activity

Fix for mod-security being triggered by Media Manager wildcard filter

Browse Source
This commit is contained in:
Cameron
2022-04-02 13:03:01 -07:00
parent da7c1b087d
commit 813f2bf38f
1 changed files with 5 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

11
e107_admin/image.php
View File

@ -1004,10 +1004,10 @@ class media_admin_ui extends e_admin_ui
$mimeTypes[$id] = $id; $mimeTypes[$id] = $id;
} }
$mimeTypes['image/*'] = 'image/*'; $mimeTypes['image/%'] = 'image/*';
$mimeTypes['video/*'] = 'video/*'; $mimeTypes['video/%'] = 'video/*';
$mimeTypes['audio/*'] = 'audio/*'; $mimeTypes['audio/%'] = 'audio/*';
$mimeTypes['application/*'] = 'application/*'; $mimeTypes['application/%'] = 'application/*';
asort($mimeTypes); asort($mimeTypes);
$this->fields['media_category']['writeParms'] = $this->cats; $this->fields['media_category']['writeParms'] = $this->cats;
@ -1203,9 +1203,8 @@ class media_admin_ui extends e_admin_ui
/** Wildcard support for media-type filter */ /** Wildcard support for media-type filter */
function handleGridMediaTypeFilter($var) function handleGridMediaTypeFilter($var)
{ {
if(strpos($var,'*')!== false) if(strpos($var,'%') !== false)
{ {
$var = str_replace('*', '%', $var);
return "m.media_type LIKE '".$var."'"; return "m.media_type LIKE '".$var."'";
} }