mirror/php-e107
1
0
Fork 0
mirror of https://github.com/e107inc/e107.git synced 2025-07-29 02:40:25 +02:00
Code Issues Releases Wiki Activity

New parser filter added for file names.

Browse Source
This commit is contained in:
Cameron
2016-12-04 07:50:27 -08:00
parent 78e2d8f50a
commit c4d71631d8
3 changed files with 7 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
e107_handlers/e_parse_class.php
View File

@@ -4369,6 +4369,11 @@ return;
return preg_replace('/[^\w\d ]/',"",$text); return preg_replace('/[^\w\d ]/',"",$text);
} }
if($type == 'file')
{
return preg_replace('/[^\w\d_\.-]/',"",$text);
}
if($validate == false) if($validate == false)
{ {

2
e107_handlers/theme_handler.php
View File

@@ -83,7 +83,7 @@ class themeHandler
if(!empty($_POST['curTheme'])) if(!empty($_POST['curTheme']))
{ {
$this->curTheme = e107::getParser()->filter($_POST['curTheme']); $this->curTheme = e107::getParser()->filter($_POST['curTheme'],'file');
} }
if(!empty($_POST['setUploadTheme']) && !empty($unzippedTheme)) if(!empty($_POST['setUploadTheme']) && !empty($unzippedTheme))

2
e107_plugins/newsletter/nl_archive.php
View File

@@ -47,7 +47,7 @@ else
} }
else else
{ {
$limit_start = $_POST['limit_start']; $limit_start = intval($_POST['limit_start']);
} }
$nl_count = $sql->count('newsletter', '(*)', "WHERE newsletter_parent='".$action_parent_id."' AND newsletter_flag='1'"); $nl_count = $sql->count('newsletter', '(*)', "WHERE newsletter_parent='".$action_parent_id."' AND newsletter_flag='1'");
if ($nl_count > 0) if ($nl_count > 0)