Changeset 1770 for FCKeditor.Net/trunk/FileBrowser/Connector.cs

Timestamp:

2008-03-22 11:59:58 (7 months ago)

Author:

fredck

Message:

[ASP.NET] Fixed #1944 : The "\" character is now blocked in the currentFolder parameter.

Files:

• FCKeditor.Net/trunk/FileBrowser/Connector.cs (modified) (2 diffs)

FCKeditor.Net/trunk/FileBrowser/Connector.cs

@@ -38 +38 @@
                         if ( !Config.Enabled )
                         {
-                                XmlResponseHandler.SendError( Response, 1, "This connector is disabled. Please check the \"editor/filemanager/connectors/aspx/config.aspx\" file." );
+                                XmlResponseHandler.SendError( Response, 1, "This connector is disabled. Please check the \"editor/filemanager/connectors/aspx/config.ascx\" file." );
                                 return;
                         }
@@ -67 +67 @@
 
                         // Check for invalid folder paths (..).
-                        if ( sCurrentFolder.IndexOf( ".." ) >= 0 )
+                        if ( sCurrentFolder.IndexOf( ".." ) >= 0 || sCurrentFolder.IndexOf( "\\" ) >= 0 )
                         {
                                 XmlResponseHandler.SendError( Response, 102, "" );