nilsteampassnet / TeamPass

// Validate file name (for our purposes we'll just remove invalid characters)

$file_name = preg_replace('[^'.$valid_chars_regex.']', '', strtolower(basename($_FILES['file']['name'])));

if (strlen($file_name) == 0 || strlen($file_name) > $MAX_FILENAME_LENGTH) {

    handleAttachmentError('Invalid file name: '.$file_name.'.', 114);

}

// Validate file extension

$ext = strtolower(getFileExtension($_REQUEST["name"]));

        FILTER_SANITIZE_STRING

    )

);

if (strlen($file_name) == 0 || strlen($file_name) > $MAX_FILENAME_LENGTH) {

    handleUploadError('Invalid file name: '.$file_name.'.');

}

// Validate file extension

$ext = strtolower(getFileExtension($_REQUEST["name"]));