[Fusionforge-commits] r15987 - branches/Branch_5_1/src/common/docman/actions

Franck VILLAUME nerville at fusionforge.org
Thu Jul 12 16:59:10 CEST 2012


Author: nerville
Date: 2012-07-12 16:59:10 +0200 (Thu, 12 Jul 2012)
New Revision: 15987

Modified:
   branches/Branch_5_1/src/common/docman/actions/addfile.php
Log:
fix from Evolvis r18497: more secure params test

Modified: branches/Branch_5_1/src/common/docman/actions/addfile.php
===================================================================
--- branches/Branch_5_1/src/common/docman/actions/addfile.php	2012-07-12 14:06:45 UTC (rev 15986)
+++ branches/Branch_5_1/src/common/docman/actions/addfile.php	2012-07-12 14:59:10 UTC (rev 15987)
@@ -6,6 +6,7 @@
  * Copyright 2002-2003, Tim Perdue/GForge, LLC
  * Copyright 2010, Franck Villaume - Capgemini
  * Copyright (C) 2011 Alain Peyrat - Alcatel-Lucent
+ * Copyright 2012, Thorsten Glaser - tarent solutions GmbH
  * http://fusionforge.org
  *
  * This file is part of FusionForge. FusionForge is free software;
@@ -52,7 +53,7 @@
 	session_redirect('/docman/?group_id='.$group_id.'&error_msg='.urlencode($return_msg));
 }
 	
-if (!$title || !$description || (!$uploaded_data && !$file_url && (!$editor && !$name))) {
+if (!$title || !$description || (!$uploaded_data && !$file_url && !$manual_path && (!$editor && !$name))) {
 	$missing_params = array();
 	if (!$title)
 		$missing_params[] = 'title';




More information about the Fusionforge-commits mailing list