[svn r14076] Improve security patch (regexp had a flaw)

18 years ago · 8dc68d321f
parent 6b522c183b
commit 8dc68d321f
1 changed files with 1 additions and 1 deletions
--- a/main/inc/lib/fileUpload.lib.php
+++ b/main/inc/lib/fileUpload.lib.php
@ -106,7 +106,7 @@ function replace_dangerous_char($filename, $strict = 'loose')

 function php2phps ($fileName)
 {
-	$fileName = preg_replace('/\.(php.?|phtml.?)\..*$/', '.phps', $fileName);
+	$fileName = preg_replace('/\.(php.?|phtml.?)(\.){0,1}.*$/', '.phps', $fileName);
 	return $fileName;
 }