Feature #4105 some security filters

14 years ago · d1a77adc62
parent 59933448aa
commit d1a77adc62
3 changed files with 3 additions and 3 deletions
--- a/main/document/show_content.php
+++ b/main/document/show_content.php
@ -88,7 +88,7 @@ $browser_display_title = 'Documents - '.Security::remove_XSS($_GET['cidReq']).'
 $file_url_web = api_get_path(WEB_COURSE_PATH).$_course['path'].'/document'.$header_file.'?'.api_get_cidreq();

 $pathinfo = pathinfo($header_file);
-if ($pathinfo['extension']=='wav' && api_get_setting('enable_nanogong') == 'true'){
+if ($pathinfo['extension']=='wav' && preg_match('/_chnano_.wav/i', $file_url_web) && api_get_setting('enable_nanogong') == 'true'){
 	echo '<div align="center">';
 		echo '<br/>';
 		echo '<applet id="applet" archive="../inc/lib/nanogong/nanogong.jar" code="gong.NanoGong" width="160" height="40" >';
--- a/main/document/showinframes.php
+++ b/main/document/showinframes.php
@ -216,7 +216,7 @@ if ($show_web_odf) {
 }
 echo "</div>";

-if ($pathinfo['extension']=='wav' && api_get_setting('enable_nanogong') == 'true'){
+if ($pathinfo['extension']=='wav' && preg_match('/_chnano_.wav/i', $file_url_web) && api_get_setting('enable_nanogong') == 'true'){
 	echo '<div align="center">';
 		echo '<br/>';
 		echo '<applet id="applet" archive="../inc/lib/nanogong/nanogong.jar" code="gong.NanoGong" width="160" height="40">';
--- a/main/document/showinframesmin.php
+++ b/main/document/showinframesmin.php
@ -146,7 +146,7 @@ echo '<div align="center">';
 $file_url_web = api_get_path(WEB_COURSE_PATH).$_course['path'].'/document'.$header_file.'?'.api_get_cidreq();

 $pathinfo = pathinfo($header_file);
-if ($pathinfo['extension']=='wav' && api_get_setting('enable_nanogong') == 'true'){
+if ($pathinfo['extension']=='wav' && preg_match('/_chnano_.wav/i', $file_url_web) && api_get_setting('enable_nanogong') == 'true'){
 	echo '<div align="center">';
 		echo '<br/>';
 		echo '<applet id="applet" archive="../inc/lib/nanogong/nanogong.jar" code="gong.NanoGong" width="160" height="40" >';