From a5dcbc3d8acfcf2845db281ef73df466508734c5 Mon Sep 17 00:00:00 2001 From: Robin Appelman Date: Sat, 5 Jan 2013 03:30:05 +0100 Subject: [PATCH] Files: prevent people from renaming files to '.' --- apps/files/ajax/rename.php | 2 +- apps/files/js/filelist.js | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/apps/files/ajax/rename.php b/apps/files/ajax/rename.php index 45448279fa..cb0bec399d 100644 --- a/apps/files/ajax/rename.php +++ b/apps/files/ajax/rename.php @@ -12,7 +12,7 @@ $file = stripslashes($_GET["file"]); $newname = stripslashes($_GET["newname"]); // Delete -if( OC_Files::move( $dir, $file, $dir, $newname )) { +if( $newname !== '.' and OC_Files::move( $dir, $file, $dir, $newname )) { OCP\JSON::success(array("data" => array( "dir" => $dir, "file" => $file, "newname" => $newname ))); } else{ diff --git a/apps/files/js/filelist.js b/apps/files/js/filelist.js index 96dd0323d2..cc47ec2612 100644 --- a/apps/files/js/filelist.js +++ b/apps/files/js/filelist.js @@ -149,7 +149,7 @@ var FileList={ event.stopPropagation(); event.preventDefault(); var newname=input.val(); - if (Files.containsInvalidCharacters(newname)) { + if (Files.containsInvalidCharacters(newname) || newname === '.') { return false; } if (newname != name) {