mbk-lab
/
nextcloud
2
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fix creating/moving/renaming/deleting files/dirs with ' in name

This commit is contained in:
Bartek Przybylski 2012-01-15 20:48:38 +01:00
parent 15ea83834d
commit 3210fe2564
6 changed files with 15 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
files/ajax/delete.php
View File

@ -6,8 +6,8 @@ require_once('../../lib/base.php');
OC_JSON::checkLoggedIn(); OC_JSON::checkLoggedIn();
// Get data // Get data
$dir = $_GET["dir"]; $dir = stripslashes($_GET["dir"]);
$files = isset($_GET["file"]) ? $_GET["file"] : $_GET["files"]; $files = isset($_GET["file"]) ? stripslashes($_GET["file"]) : stripslashes($_GET["files"]);
$files = explode(';', $files); $files = explode(';', $files);
$filesWithError = ''; $filesWithError = '';

6
files/ajax/move.php
View File

@ -6,9 +6,9 @@ require_once('../../lib/base.php');
OC_JSON::checkLoggedIn(); OC_JSON::checkLoggedIn();
// Get data // Get data
$dir = $_GET["dir"]; $dir = stripslashes($_GET["dir"]);
$file = $_GET["file"]; $file = stripslashes($_GET["file"]);
$target = $_GET["target"]; $target = stripslashes($_GET["target"]);
if(OC_Files::move($dir,$file,$target,$file)){ if(OC_Files::move($dir,$file,$target,$file)){

6
files/ajax/newfile.php
View File

@ -6,8 +6,8 @@ require_once('../../lib/base.php');
OC_JSON::checkLoggedIn(); OC_JSON::checkLoggedIn();
// Get the params // Get the params
$dir = isset( $_GET['dir'] ) ? $_GET['dir'] : ''; $dir = isset( $_GET['dir'] ) ? stripslashes($_GET['dir']) : '';
$filename = isset( $_GET['filename'] ) ? $_GET['filename'] : ''; $filename = isset( $_GET['filename'] ) ? stripslashes($_GET['filename']) : '';
$content = isset( $_GET['content'] ) ? $_GET['content'] : ''; $content = isset( $_GET['content'] ) ? $_GET['content'] : '';
if($filename == '') { if($filename == '') {
@ -24,4 +24,4 @@ if(OC_Files::newFile($dir, $filename, 'file')) {
} }
OC_JSON::error(array("data" => array( "message" => "Error when creating the file" ))); OC_JSON::error(array("data" => array( "message" => "Error when creating the file" )));

6
files/ajax/newfolder.php
View File

@ -6,15 +6,15 @@ require_once('../../lib/base.php');
OC_JSON::checkLoggedIn(); OC_JSON::checkLoggedIn();
// Get the params // Get the params
$dir = isset( $_GET['dir'] ) ? $_GET['dir'] : ''; $dir = isset( $_GET['dir'] ) ? stripslashes($_GET['dir']) : '';
$foldername = isset( $_GET['foldername'] ) ? $_GET['foldername'] : ''; $foldername = isset( $_GET['foldername'] ) ? stripslashes($_GET['foldername']) : '';
if(trim($foldername) == '') { if(trim($foldername) == '') {
OC_JSON::error(array("data" => array( "message" => "Empty Foldername" ))); OC_JSON::error(array("data" => array( "message" => "Empty Foldername" )));
exit(); exit();
} }
if(OC_Files::newFile($dir, $foldername, 'dir')) { if(OC_Files::newFile($dir, stripslashes($foldername), 'dir')) {
OC_JSON::success(array("data" => array())); OC_JSON::success(array("data" => array()));
exit(); exit();
} }

6
files/ajax/rename.php
View File

@ -6,9 +6,9 @@ require_once('../../lib/base.php');
OC_JSON::checkLoggedIn(); OC_JSON::checkLoggedIn();
// Get data // Get data
$dir = $_GET["dir"]; $dir = stripslashes($_GET["dir"]);
$file = $_GET["file"]; $file = stripslashes($_GET["file"]);
$newname = $_GET["newname"]; $newname = stripslashes($_GET["newname"]);
// Delete // Delete
if( OC_Files::move( $dir, $file, $dir, $newname )) { if( OC_Files::move( $dir, $file, $dir, $newname )) {

2
files/index.php
View File

@ -38,7 +38,7 @@ if(!isset($_SESSION['timezone'])){
} }
OC_App::setActiveNavigationEntry( "files_index" ); OC_App::setActiveNavigationEntry( "files_index" );
// Load the files // Load the files
$dir = isset( $_GET['dir'] ) ? $_GET['dir'] : ''; $dir = isset( $_GET['dir'] ) ? stripslashes($_GET['dir']) : '';
// Redirect if directory does not exist // Redirect if directory does not exist
if(!OC_Filesystem::is_dir($dir)) { if(!OC_Filesystem::is_dir($dir)) {
header("Location: ".$_SERVER['PHP_SELF'].""); header("Location: ".$_SERVER['PHP_SELF']."");