From 7ca2c5eaa795de1010b7c6913619832ce1694b0d Mon Sep 17 00:00:00 2001 From: Christian Date: Mon, 20 Mar 2023 16:57:10 -0500 Subject: [PATCH] Learnpath: Fix special character when importing scorm with bigupload - refs #4650 --- main/inc/lib/javascript/bigupload/inc/bigUpload.php | 4 +++- main/lp/scorm.class.php | 1 + 2 files changed, 4 insertions(+), 1 deletion(-) diff --git a/main/inc/lib/javascript/bigupload/inc/bigUpload.php b/main/inc/lib/javascript/bigupload/inc/bigUpload.php index bf188bb5d2..70315b4a92 100644 --- a/main/inc/lib/javascript/bigupload/inc/bigUpload.php +++ b/main/inc/lib/javascript/bigupload/inc/bigUpload.php @@ -64,7 +64,9 @@ class BigUploadResponse $this->tempName = $value; } else { if ('learnpath' === $_REQUEST['origin'] && !empty($_REQUEST['name'])) { - $this->tempName = $_REQUEST['name']; + $this->tempName = disable_dangerous_file( + api_replace_dangerous_char($_REQUEST['name']) + ); } else { $this->tempName = mt_rand().'.tmp'; } diff --git a/main/lp/scorm.class.php b/main/lp/scorm.class.php index e9e49f817d..5a9adcbf7f 100755 --- a/main/lp/scorm.class.php +++ b/main/lp/scorm.class.php @@ -720,6 +720,7 @@ class scorm extends learnpath if ($updateDirContents && $lpToCheck) { $originalPath = str_replace('/.', '', $lpToCheck->path); + $originalPath = dirname($originalPath); if ($originalPath != $newDir) { Display::addFlash(Display::return_message(get_lang('FileError')));