Changeset 530

Timestamp:

Jun 25, 2015 10:33:35 PM (9 years ago)

Author:

anonymous

Message:

 

File:

• trunk/lib/Upload.inc.php (modified) (1 diff)

trunk/lib/Upload.inc.php

@@ -502 +502 @@
         }
     }
+
+    /**
+     * Remove unsafe characters from filename.
+     * While this function has been moved to Utilities.inc.php, it should remain here for backwards compatibility.
+     *
+     * @access  public
+     * @param   string  $file_name  A name of a file.
+     * @return  string              The same name, but cleaned.
+     */
+    public function cleanFileName($file_name)
+    {
+        $app =& App::getInstance();
+
+        $file_name = preg_replace(array(
+            '/&([a-z]{1,2})(?:acute|cedil|circ|grave|lig|orn|ring|slash|th|tilde|uml|caron);/ui',
+            '/&(?:amp);/ui',
+            '/[&;]+/u',
+            '/[^a-zA-Z0-9()@._=+-]+/u',
+            '/^_+|_+$/u'
+        ), array(
+            '$1',
+            'and',
+            '',
+            '_',
+            ''
+        ), htmlentities($file_name, ENT_NOQUOTES | ENT_IGNORE, $app->getParam('character_set')));
+        return mb_substr($file_name, 0, 250);
+    }
 }