Changeset 18022

Timestamp:

05/24/2011 03:56:40 PM (14 years ago)

Author:

ryan

Message:

Make sure ext passes through sanitize_file_name()

Location:

branches/3.1

Files:

• . (modified) (1 prop)
• wp-app.php (modified) (1 diff)

branches/3.1/wp-app.php

@@ -608 +608 @@
         $slug = '';
         if ( isset( $_SERVER['HTTP_SLUG'] ) )
-            $slug = sanitize_file_name( $_SERVER['HTTP_SLUG'] );
+            $slug = $_SERVER['HTTP_SLUG'];
         elseif ( isset( $_SERVER['HTTP_TITLE'] ) )
-            $slug = sanitize_file_name( $_SERVER['HTTP_TITLE'] );
+            $slug = $_SERVER['HTTP_TITLE'];
         elseif ( empty( $slug ) ) // just make a random name
             $slug = substr( md5( uniqid( microtime() ) ), 0, 7);
         $ext = preg_replace( '|.*/([a-z0-9]+)|', '$1', $_SERVER['CONTENT_TYPE'] );
-        $slug = "$slug.$ext";
+        $slug = sanitize_file_name( "$slug.$ext" );
         $file = wp_upload_bits( $slug, NULL, $bits);