Changeset 4537

Timestamp:

11/28/2006 10:03:19 PM (18 years ago)

Author:

ryan

Message:

xmlrpc filename sanitation. Props donncha. fixes #3395

File:

• trunk/xmlrpc.php (modified) (2 diffs)

trunk/xmlrpc.php

@@ -818 +818 @@
         $data        = $args[3];
 
-        $name = $data['name'];
+        $name = sanitize_file( $data['name'] );
         $type = $data['type'];
         $bits = $data['bits'];
@@ -842 +842 @@
             return new IXR_Error(500, 'Could not write file '.$name);
         }
-        return apply_filters( 'wp_handle_upload', array( 'file' => $name, 'url' => $upload[ 'url' ], 'type' => $type ) );
+        return apply_filters( 'wp_handle_upload', array( 'file' => $upload[ 'file' ], 'url' => $upload[ 'url' ], 'type' => $type ) );
     }