aboutsummaryrefslogtreecommitdiffstats
path: root/phpBB/download
diff options
context:
space:
mode:
authorFyorl <gaelreth@gmail.com>2012-08-14 11:42:23 +0100
committerFyorl <gaelreth@gmail.com>2012-08-14 11:42:23 +0100
commit20ecd046daf660a7cb5ae7079cea9a6ed26c9bab (patch)
treef6f38018513abdef666ce46fb026353c6495a9e2 /phpBB/download
parente8830c3369dbd4b25a4798eeb3fe2c7834825c42 (diff)
downloadforums-20ecd046daf660a7cb5ae7079cea9a6ed26c9bab.tar
forums-20ecd046daf660a7cb5ae7079cea9a6ed26c9bab.tar.gz
forums-20ecd046daf660a7cb5ae7079cea9a6ed26c9bab.tar.bz2
forums-20ecd046daf660a7cb5ae7079cea9a6ed26c9bab.tar.xz
forums-20ecd046daf660a7cb5ae7079cea9a6ed26c9bab.zip
[feature/attach-dl] Moved filename cleaning into own function
PHPBB3-11042
Diffstat (limited to 'phpBB/download')
-rw-r--r--phpBB/download/file.php9
1 files changed, 1 insertions, 8 deletions
diff --git a/phpBB/download/file.php b/phpBB/download/file.php
index 1aeaceb824..4a89aca3e6 100644
--- a/phpBB/download/file.php
+++ b/phpBB/download/file.php
@@ -374,14 +374,7 @@ else
trigger_error('ERROR_NO_ATTACHMENT');
}
- $bad_chars = array("'", "\\", ' ', '/', ':', '*', '?', '"', '<', '>', '|');
- $clean_name = current($row);
-
- // rawurlencode to convert any potentially 'bad' characters that we missed
- $clean_name = rawurlencode(str_replace($bad_chars, '_', $clean_name));
-
- // Turn the %xx entities created by rawurlencode to _
- $clean_name = preg_replace("/%(\w{2})/", '_', $clean_name);
+ $clean_name = phpbb_download_clean_filename(current($row));
$suffix = '_' . (($post_id) ? $post_id : $topic_id) . '_' . $clean_name;
$store_name = 'att_' . time() . '_' . unique_id();