Changeset 1143 for trunk/plugins/ImageManager/Classes/ImageEditor.php

Timestamp:

12/20/08 23:04:08 (3 years ago)

Author:

gogo

Message:

Security patch - see ticket:1363

Files:

• trunk/plugins/ImageManager/Classes/ImageEditor.php (modified) (1 diff)

trunk/plugins/ImageManager/Classes/ImageEditor.php

@@ -260 +260 @@
                         Return $base.'.gif';
 
+    // Ensure type is in acceptable image types
+    $valid_extensions = $this->manager->config['allowed_image_extensions'];    
+    if(!in_array($ext, $valid_extensions))
+                {
+      return $base . ".".strtolower($type ? $type : 'jpg');
+                }
+    
                 Return $filename;
         }