admin/Studio-42-elFinder
1
0
Fork 0
mirror of https://github.com/Studio-42/elFinder synced 2026-06-08 12:37:09 +00:00
Code Issues Packages Projects Releases Wiki Activity

[VD:abstract] sanitize Illegal characters of file system in getItemsInHand()

Browse Source
This commit is contained in:
nao-pon
2020-03-11 11:25:46 +09:00
parent 5a5bcef5aa
commit d0fb5d7fd9
1 changed files with 11 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
php/elFinderVolumeDriver.class.php
+11
View File
@@ -4301,7 +4301,13 @@ abstract class elFinderVolumeDriver
*/
protected function getItemsInHand($hashes, $dir = null, $canLink = null)
{
static $banChrs = null;
static $totalSize = 0;
if (is_null($banChrs)) {
$banChrs = DIRECTORY_SEPARATOR !== '/'? array('\\', '/', ':', '*', '?', '"', '<', '>', '|') : array('\\', '/');
}
if (is_null($dir)) {
$totalSize = 0;
if (!$tmpDir = $this->getTempPath()) {
@@ -4328,6 +4334,11 @@ abstract class elFinderVolumeDriver
}
$name = $file['name'];
// remove ctrl characters
$name = preg_replace('/[[:cntrl:]]+/', '', $name);
// replace ban characters
$name = str_replace($banChrs, '_', $name);
// for call from search results
if (isset($files[$name])) {
$name = preg_replace('/^(.*?)(\..*)?$/', '$1_' . $files[$name]++ . '$2', $name);