| @@ 88-95 (lines=8) @@ | ||
| 85 | 	if ($folderName == '.') { | |
| 86 | $folderName = ''; | |
| 87 | } | |
| 88 | 	if ($folderName) { | |
| 89 | $folderName .= '/'; | |
| 90 | // Not allowed to use “../” | |
| 91 | 		if (strpos('/' . $folderName, '/../') !== false) { | |
| 92 | 			FlashMessages::addMessage('Folder names are not allowed to include “../”'); | |
| 93 | break; | |
| 94 | } | |
| 95 | } | |
| 96 | ||
| 97 | // Make sure the media folder exists | |
| 98 | 	if (!is_dir(WT_DATA_DIR . $MEDIA_DIRECTORY)) { | |
| @@ 245-252 (lines=8) @@ | ||
| 242 | 	if ($folderName == '.') { | |
| 243 | $folderName = ''; | |
| 244 | } | |
| 245 | 	if ($folderName) { | |
| 246 | $folderName .= '/'; | |
| 247 | // Not allowed to use “../” | |
| 248 | 		if (strpos('/' . $folderName, '/../') !== false) { | |
| 249 | 			FlashMessages::addMessage('Folder names are not allowed to include “../”'); | |
| 250 | break; | |
| 251 | } | |
| 252 | } | |
| 253 | ||
| 254 | // Make sure the media folder exists | |
| 255 | 	if (!is_dir(WT_DATA_DIR . $MEDIA_DIRECTORY)) { | |
| @@ 52-59 (lines=8) @@ | ||
| 49 | 			if ($folderName == '.') { | |
| 50 | $folderName = ''; | |
| 51 | } | |
| 52 | 			if ($folderName) { | |
| 53 | $folderName .= '/'; | |
| 54 | // Not allowed to use “../” | |
| 55 | 				if (strpos('/' . $folderName, '/../') !== false) { | |
| 56 | 					FlashMessages::addMessage('Folder names are not allowed to include “../”'); | |
| 57 | break; | |
| 58 | } | |
| 59 | } | |
| 60 | ||
| 61 | // Make sure the media folder exists | |
| 62 | 			if (!is_dir(WT_DATA_DIR . $MEDIA_DIRECTORY)) { | |