Changeset 3267:1c79c0953db8 for inc

Timestamp:

07/12/16 08:29:10 (9 years ago)

Author:

franck <carnet.franck.paul@…>

Branch:

default

Message:

Prevents .htaccess upload, thanks wiswat for reporting this.

Location:

inc

Files:

• core/class.dc.core.php (modified) (1 diff)
• dbschema/upgrade.php (modified) (1 diff)

inc/core/class.dc.core.php

@@ -1396 +1396 @@
                     array('lang','string','en',
                     'Default blog language'),
-                    array('media_exclusion','string','/\.(phps?|pht(ml)?|phl|s?html?|js)[0-9]*$/i',
+                    array('media_exclusion','string','/\.(phps?|pht(ml)?|phl|s?html?|js|htaccess)[0-9]*$/i',
                     'File name exclusion pattern in media manager. (PCRE value)'),
                     array('media_img_m_size','integer',448,

inc/dbschema/upgrade.php

@@ -552 +552 @@
                     @file_put_contents($f,'Require all denied'."\n".'Deny from all'."\n");
                }
+
+               # Update flie exclusion upload regex
+               $strReq = 'UPDATE '.$core->prefix.'setting '.
+                         " SET setting_value = '/\\.(phps?|pht(ml)?|phl|s?html?|js|htaccess)[0-9]*\$/i' ".
+                         " WHERE setting_id = 'media_exclusion' ".
+                         " AND setting_ns = 'system' ".
+                         " AND (setting_value = '/\\.php[0-9]*\$/i' ".
+                         "   OR setting_value = '/\\.php\$/i') ".
+                         "    OR setting_value = '/\\.(phps?|pht(ml)?|phl)[0-9]*\$/i' ".
+                         "    OR setting_value = '/\\.(phps?|pht(ml)?|phl|s?html?|js)[0-9]*\$/i'";
+               $core->con->execute($strReq);
           }