mirror_php/moodle
1
0
Fork 0
mirror of https://github.com/moodle/moodle.git synced 2025-05-04 15:27:34 +02:00
Code Issues Projects Releases Wiki Activity

MDL-13766, fixed mimetype validation.

Browse Source
This commit is contained in:
Dongsheng Cai 2010-07-06 07:28:03 +00:00
parent 16f61c701e
commit 2385e6de5b
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
repository/repository_ajax.php
View File

@ -164,14 +164,14 @@ switch ($action) {
case 'download': case 'download':
// validate mimetype // validate mimetype
$mimetypes = array(); $mimetypes = array();
if (in_array('*', $accepted_types) or $accepted_types == '*') { if ((is_array($accepted_types) and in_array('*', $accepted_types)) or $accepted_types == '*') {
$mimetypes = '*'; $mimetypes = '*';
} else { } else {
foreach ($accepted_types as $type) { foreach ($accepted_types as $type) {
$mimetypes[] = mimeinfo('type', $type); $mimetypes[] = mimeinfo('type', $type);
} }
if (!in_array(mimeinfo('type', $saveas_filename), $mimetypes)) { if (!in_array(mimeinfo('type', $saveas_filename), $mimetypes)) {
throw new moodle_exception('invalidfiletype', 'repository', '', mimeinfo('type', $_FILES[$elname]['name'])); throw new moodle_exception('invalidfiletype', 'repository', '', mimeinfo('type', $saveas_filename));
} }
} }