浏览代码

[svn r10289] prevent from quotes in presentation names

Eric Marguin 18 年之前
父节点
当前提交
f572afd418
共有 1 个文件被更改,包括 2 次插入0 次删除
  1. 2 0
      main/newscorm/presentation.class.php

+ 2 - 0
main/newscorm/presentation.class.php

@@ -33,6 +33,7 @@ class presentation extends learnpath {
     	global $_course, $_user;
     	
     	
+		$file['name'] = replace_dangerous_char($file['name']);
 		// get properties of ppt file
 		$document_datas = DocumentManager::get_all_document_data($_course, $file);
 		$to_group_id = (empty($document_datas['to_group_id'])) ? 0 : $document_datas['to_group_id'];
@@ -44,6 +45,7 @@ class presentation extends learnpath {
 		$base_work_dir = api_get_path(SYS_COURSE_PATH).$_course['path'].'/document/';
 		$created_dir = create_unexisting_directory($_course,$_user['user_id'],$to_group_id,$to_user_id,$base_work_dir,$dir_name);
 		
+		
 		move_uploaded_file($file['tmp_name'],$base_work_dir.$file['name']);
 		$file = $base_work_dir.$file['name'];
 		chmod($file,0777);