View | Details | Raw Unified | Return to bug 37488
Collapse All | Expand All

(-)a/tools/picture-upload.pl (-2 / +6 lines)
Lines 249-255 sub handle_dir { Link Here
249
            $cardnumber =~ s/[\"\r\n]//g; # remove offensive characters
249
            $cardnumber =~ s/[\"\r\n]//g; # remove offensive characters
250
            $filename   =~ s/[\"\r\n\s]//g;
250
            $filename   =~ s/[\"\r\n\s]//g;
251
            $logger->debug("Cardnumber: $cardnumber Filename: $filename");
251
            $logger->debug("Cardnumber: $cardnumber Filename: $filename");
252
            $source = "$dir/$filename";
252
            $source = Cwd::abs_path("$dir/$filename");
253
            if ( $source !~ /^\Q$dir\E/ ) {
254
255
                #NOTE: Unset $source if it points to a file outside of this unpacked ZIP archive
256
                $source = '';
257
            }
253
            %counts = handle_file( $cardnumber, $source, $template, %counts );
258
            %counts = handle_file( $cardnumber, $source, $template, %counts );
254
        }
259
        }
255
        closedir $dir_h;
260
        closedir $dir_h;
256
- 

Return to bug 37488