|
@@ 372-381 (lines=10) @@
|
| 369 |
|
$newFilename = str_replace('..\\', '', str_replace('../', '', $_REQUEST['newFilename'])); |
| 370 |
|
$newFilename = $modx->db->escape($newFilename); |
| 371 |
|
|
| 372 |
|
if (!checkExtension($newFilename)) { |
| 373 |
|
echo '<span class="warning"><b>' . $_lang['files_filetype_notok'] . '</b></span><br /><br />'; |
| 374 |
|
} elseif (preg_match('@(\\\\|\/|\:|\;|\,|\*|\?|\"|\<|\>|\||\?)@', $newFilename) !== 0) { |
| 375 |
|
echo $_lang['files.dynamic.php3']; |
| 376 |
|
} else { |
| 377 |
|
if (!copy($filename, MODX_BASE_PATH . $newFilename)) { |
| 378 |
|
echo $_lang['files.dynamic.php5']; |
| 379 |
|
} |
| 380 |
|
umask($old_umask); |
| 381 |
|
} |
| 382 |
|
} |
| 383 |
|
// Rename folder here |
| 384 |
|
if ($_REQUEST['mode'] == 'renameFolder') { |
|
@@ 417-426 (lines=10) @@
|
| 414 |
|
), '', $_REQUEST['newFilename']); |
| 415 |
|
$newFilename = $modx->db->escape($newFilename); |
| 416 |
|
|
| 417 |
|
if (!checkExtension($newFilename)) { |
| 418 |
|
echo '<span class="warning"><b>' . $_lang['files_filetype_notok'] . '</b></span><br /><br />'; |
| 419 |
|
} elseif (preg_match('@(\\\\|\/|\:|\;|\,|\*|\?|\"|\<|\>|\||\?)@', $newFilename) !== 0) { |
| 420 |
|
echo $_lang['files.dynamic.php3']; |
| 421 |
|
} else { |
| 422 |
|
if (!rename($filename, $path . '/' . $newFilename)) { |
| 423 |
|
echo $_lang['files.dynamic.php5']; |
| 424 |
|
} |
| 425 |
|
umask($old_umask); |
| 426 |
|
} |
| 427 |
|
} |
| 428 |
|
} |
| 429 |
|
// End New Folder - Raymond |
evolution-cms /
evolution
