Changeset 391 for FCKeditor/trunk/editor/filemanager/browser/default/connectors/php/io.php

Timestamp:

2007-06-26 00:10:59 (17 months ago)

Author:

fredck

Message:

Fix for SA25719.

Files:

• FCKeditor/trunk/editor/filemanager/browser/default/connectors/php/io.php (modified) (3 diffs)

FCKeditor/trunk/editor/filemanager/browser/default/connectors/php/io.php

@@ -46 +46 @@
         {
                 if ( isset( $GLOBALS['HeaderSent'] ) && $GLOBALS['HeaderSent'] )
-                { 
+                {
                         SendErrorNode( 1, "Error creating folder \"{$sResourceTypePath}\" ({$sErrorMsg})" ) ;
                         CreateXmlFooter() ;
@@ -113 +113 @@
         $slash = ( strpos( $sRealPath, '/' ) === false ) ? '\\' : '/' ;
         $sSelfPath = str_replace( '/', $slash, $sSelfPath ) ;
-        
+
         $position = strpos( $sRealPath, $sSelfPath ) ;
 
@@ -123 +123 @@
         return substr( $sRealPath, 0, $position ) ;
 }
+
+function CheckFileName( $fileName, $resourceType )
+{
+        global $Config ;
+
+        // SA25719
+        if ( strpos( strtolower( $fileName ), '::$data' ) != false )
+                return false ;
+
+        // Get the extension.
+        $sExtension = substr( $fileName, ( strrpos($fileName, '.') + 1 ) ) ;
+        $sExtension = strtolower( $sExtension ) ;
+
+        $arDenied       = $Config['DeniedExtensions'][$resourceType] ;
+
+        if ( count($arDenied) > 0 && in_array( $sExtension, $arDenied ) )
+                return false ;
+        
+        $arAllowed      = $Config['AllowedExtensions'][$resourceType] ;
+        
+        if ( count($arAllowed) > 0 && !in_array( $sExtension, $arAllowed ) )
+                return false ;
+
+        return true ;
+}
 ?>