Merge pull request #218 from benholmen/dev

Sanitize uploaded file name
strangerstudios · Oct 13, 2021 · a685806 · a685806
2 parents 2780df6 + f91d02b
commit a685806
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/classes/class.field.php b/classes/class.field.php
@@ -277,7 +277,7 @@ function saveFile($user_id, $name, $value)
 			}
 
 			//figure out new filename
-			$filename = $file['name'];
+			$filename = sanitize_file_name($file['name']);
 			$count = 0;
 
 			while(file_exists($pmprorh_dir . $filename))