Feature #2044 fix check security load extension

15 years ago · 00fc7e8c46
parent 3431687f7e
commit 00fc7e8c46
2 changed files with 9 additions and 4 deletions
--- a/main/inc/lib/svg-edit/extensions/fileopen.php
+++ b/main/inc/lib/svg-edit/extensions/fileopen.php
@ -22,6 +22,8 @@ if(!isset($_FILES['svg_file']['tmp_name'])) {
 	api_not_allowed(false);//from Chamilo
 	die();
 }
+
+
 ?>
 <!doctype html>
 <?php
@ -42,8 +44,11 @@ if(!isset($_FILES['svg_file']['tmp_name'])) {
 		$prefix = 'data:' . $info['mime'] . ';base64,';
 	}
 	
-//a bit title security
+//check the extension
+$extension = explode('.', $file);
+$extension = strtolower($extension[sizeof($extension) - 1]);	

+//a bit title security
 $filename = addslashes(trim($file));
 $filename = Security::remove_XSS($filename);
 $filename = replace_dangerous_char($filename, 'strict');
--- a/main/inc/lib/svg-edit/extensions/filesave.php
+++ b/main/inc/lib/svg-edit/extensions/filesave.php
@ -87,7 +87,6 @@ if (phpversion() >= '5.3') {
 	$mime_png='image/png';//svg-edit return image/png; charset=binary 
 	$mime_svg='image/svg+xml';
 	$mime_xml='application/xml';//hack for svg-edit because original code return application/xml; charset=us-ascii. See	  
-	  
 	if(strpos($current_mime, $mime_png)===false && $extension=='png')
 	{
 		die();//File extension does not match its content
@ -95,6 +94,7 @@ if (phpversion() >= '5.3') {
 	{
 		die();//File extension does not match its content
 	}
+	
 }else{
 	
 	if($suffix!= 'svg' || $suffix!= 'png')