Browse Source

Protect lp_upload.php to avoid malicious uploads by unauthenticated users #security

Yannick Warnier 6 years ago
parent
commit
1c82459f14
1 changed files with 1 additions and 2 deletions
  1. 1 2
      main/lp/lp_upload.php

+ 1 - 2
main/lp/lp_upload.php

@@ -12,9 +12,8 @@ use Chamilo\CourseBundle\Component\CourseCopy\CourseRestorer;
  * @author Yannick Warnier <ywarnier@beeznest.org>
  */
 
-// Flag to allow for anonymous user - needs to be set before global.inc.php.
-$use_anonymous = true;
 require_once __DIR__.'/../inc/global.inc.php';
+api_protect_course_script();
 $course_dir = api_get_course_path().'/scorm';
 $course_sys_dir = api_get_path(SYS_COURSE_PATH).$course_dir;
 if (empty($_POST['current_dir'])) {