mirror of
https://github.com/moodle/moodle.git
synced 2025-04-13 12:32:08 +02:00
better input validation in files/index.php SC#307
This commit is contained in:
parent
02b22073b8
commit
61212e3f96
@ -16,7 +16,7 @@
|
||||
$action = optional_param('action', '', PARAM_ACTION);
|
||||
$name = optional_param('name', '', PARAM_FILE);
|
||||
$oldname = optional_param('oldname', '', PARAM_FILE);
|
||||
$choose = optional_param('choose', '', PARAM_CLEAN);
|
||||
$choose = optional_param('choose', '', PARAM_FILE); //in fact it is always 'formname.inputname'
|
||||
$userfile= optional_param('userfile','',PARAM_FILE);
|
||||
$save = optional_param('save', 0, PARAM_BOOL);
|
||||
$text = optional_param('text', '', PARAM_RAW);
|
||||
|
Loading…
x
Reference in New Issue
Block a user