better input validation in files/index.php SC#307; backported from HEAD

This commit is contained in:
skodak
2006-08-30 08:04:43 +00:00
parent 0679583490
commit b02b2f70d7
+1 -1
View File
@@ -16,7 +16,7 @@
$action = optional_param('action', '', PARAM_ACTION);
$name = optional_param('name', '', PARAM_FILE);
$oldname = optional_param('oldname', '', PARAM_FILE);
$choose = optional_param('choose', '', PARAM_CLEAN);
$choose = optional_param('choose', '', PARAM_FILE); //in fact it is always 'formname.inputname'
$userfile= optional_param('userfile','',PARAM_FILE);
$save = optional_param('save', 0, PARAM_BOOL);
$text = optional_param('text', '', PARAM_RAW);