Changeset 1649

Timestamp:

2008-02-28 11:22:46 (2 years ago)

Author:

wwalc

Message:

Fix for #1945 - sanitizing control characters in Perl.

Files:

• FCKeditor/trunk/editor/filemanager/connectors/perl/commands.pl (modified) (2 diffs)

FCKeditor/trunk/editor/filemanager/connectors/perl/commands.pl

@@ -92 +92 @@
         if($FORM{'NewFolderName'} ne "") {
                 $sNewFolderName = $FORM{'NewFolderName'};
+                $sNewFolderName =~ s/\.|\\|\/|\||\:|\?|\*|\"|<|>|[[:cntrl:]]/_/g;
                 # Map the virtual path to the local server path of the current folder.
                 $sServerDir = &ServerMapFolder($resourceType, $currentFolder);
@@ -129 +130 @@
                 # Get the uploaded file name.
                 $sFileName = $new_fname;
+                $sFileName =~ s/\\|\/|\||\:|\?|\*|\"|<|>|[[:cntrl:]]/_/g;
                 $sOriginalFileName = $sFileName;