File tree Expand file tree Collapse file tree 1 file changed +4
-4
lines changed
Expand file tree Collapse file tree 1 file changed +4
-4
lines changed Original file line number Diff line number Diff line change @@ -45,12 +45,12 @@ public function upload(array $fields)
4545 $ fileField = $ _FILES [$ field ];
4646 $ file = new File ($ fileField );
4747
48- $ name = preg_replace ('/[^\00-\255 ]+/u ' , '' , $ file ->name );
49- $ name = str_replace ( ' " ' , '' , trim ( $ name) );
50- $ path = realpath ($ this ->uploadPath ) . '/ ' . $ name . $ file ->uniqueName ;
48+ $ name = preg_replace ('/[^a-z0-9\-\_\. ]+/iu ' , '' , trim ( $ file ->name ) );
49+ $ name = preg_replace ( ' /(\.[a-z0-9]+)$/i ' , '' , $ name );
50+ $ path = realpath ($ this ->uploadPath ) . '/ ' . $ name . ' - ' . $ file ->uniqueName ;
5151
5252 if ($ file ->error == 0 && move_uploaded_file ($ file ->tmp_name , $ path )) {
53- $ file ->uploadUrl = $ this ->uploadUrl . '/ ' . $ name . $ file ->uniqueName ;
53+ $ file ->uploadUrl = $ this ->uploadUrl . '/ ' . $ name . ' - ' . $ file ->uniqueName ;
5454 $ file ->uploadPath = $ path ;
5555 $ _POST [$ field ] = $ file ;
5656 $ files [] = $ file ;
You can’t perform that action at this time.
0 commit comments