summaryrefslogtreecommitdiffstats
path: root/files
diff options
context:
space:
mode:
authorRobin Appelman <icewind1991@gmail.com>2010-10-24 13:25:21 +0200
committerRobin Appelman <icewind1991@gmail.com>2010-10-24 13:25:21 +0200
commitb116b2fd4c75cb8ddf722ae13be85bbe4eae33f3 (patch)
tree922e78c1fc1ae96d3078ee26ddefb46b47789429 /files
parente56c3165764bd79c4067e89d477f9d7007f2818d (diff)
downloadnextcloud-server-b116b2fd4c75cb8ddf722ae13be85bbe4eae33f3.tar.gz
nextcloud-server-b116b2fd4c75cb8ddf722ae13be85bbe4eae33f3.zip
fix uploading files to folders with special characters in the name
Diffstat (limited to 'files')
-rwxr-xr-x[-rw-r--r--]files/upload.php4
1 files changed, 1 insertions, 3 deletions
diff --git a/files/upload.php b/files/upload.php
index 1190b466eac..e84cf8303db 100644..100755
--- a/files/upload.php
+++ b/files/upload.php
@@ -22,11 +22,9 @@
*/
require_once('../inc/lib_base.php');
-// sleep(5); //immitate slow internet.
-
$fileName=$_FILES['file']['name'];
$source=$_FILES['file']['tmp_name'];
-$target=$_GET['dir'].'/'.$fileName;
+$target=stripslashes($_GET['dir']).'/'.$fileName;
if(isset($_SESSION['username']) and $_SESSION['username'] and strpos($_GET['dir'],'..')===false){
if(OC_FILESYSTEM::fromTmpFile($source,$target)){
echo 'true';