Protect lp_upload.php to avoid malicious uploads by unauthenticated users #security

6 years ago · 78749b5580
parent 5e81f51c7b
commit 78749b5580
1 changed files with 1 additions and 2 deletions
--- a/main/lp/lp_upload.php
+++ b/main/lp/lp_upload.php
@ -12,9 +12,8 @@ use Chamilo\CourseBundle\Component\CourseCopy\CourseRestorer;
 * @author Yannick Warnier <ywarnier@beeznest.org>
 */

-// Flag to allow for anonymous user - needs to be set before global.inc.php.
-$use_anonymous = true;
 require_once __DIR__.'/../inc/global.inc.php';
+api_protect_course_script();
 $course_dir = api_get_course_path().'/scorm';
 $course_sys_dir = api_get_path(SYS_COURSE_PATH).$course_dir;
 if (empty($_POST['current_dir'])) {