| @@ 88-95 (lines=8) @@ | ||
| 85 | 	if ($folderName == '.') { | 
                                |
| 86 | $folderName = '';  | 
                                |
| 87 | }  | 
                                |
| 88 | 	if ($folderName) { | 
                                |
| 89 | $folderName .= '/';  | 
                                |
| 90 | // Not allowed to use “../”  | 
                                |
| 91 | 		if (strpos('/' . $folderName, '/../') !== false) { | 
                                |
| 92 | 			FlashMessages::addMessage('Folder names are not allowed to include “../”'); | 
                                |
| 93 | break;  | 
                                |
| 94 | }  | 
                                |
| 95 | }  | 
                                |
| 96 | ||
| 97 | // Make sure the media folder exists  | 
                                |
| 98 | 	if (!is_dir(WT_DATA_DIR . $MEDIA_DIRECTORY)) { | 
                                |
| @@ 245-252 (lines=8) @@ | ||
| 242 | 	if ($folderName == '.') { | 
                                |
| 243 | $folderName = '';  | 
                                |
| 244 | }  | 
                                |
| 245 | 	if ($folderName) { | 
                                |
| 246 | $folderName .= '/';  | 
                                |
| 247 | // Not allowed to use “../”  | 
                                |
| 248 | 		if (strpos('/' . $folderName, '/../') !== false) { | 
                                |
| 249 | 			FlashMessages::addMessage('Folder names are not allowed to include “../”'); | 
                                |
| 250 | break;  | 
                                |
| 251 | }  | 
                                |
| 252 | }  | 
                                |
| 253 | ||
| 254 | // Make sure the media folder exists  | 
                                |
| 255 | 	if (!is_dir(WT_DATA_DIR . $MEDIA_DIRECTORY)) { | 
                                |
| @@ 52-59 (lines=8) @@ | ||
| 49 | 			if ($folderName == '.') { | 
                                |
| 50 | $folderName = '';  | 
                                |
| 51 | }  | 
                                |
| 52 | 			if ($folderName) { | 
                                |
| 53 | $folderName .= '/';  | 
                                |
| 54 | // Not allowed to use “../”  | 
                                |
| 55 | 				if (strpos('/' . $folderName, '/../') !== false) { | 
                                |
| 56 | 					FlashMessages::addMessage('Folder names are not allowed to include “../”'); | 
                                |
| 57 | break;  | 
                                |
| 58 | }  | 
                                |
| 59 | }  | 
                                |
| 60 | ||
| 61 | // Make sure the media folder exists  | 
                                |
| 62 | 			if (!is_dir(WT_DATA_DIR . $MEDIA_DIRECTORY)) { | 
                                |