xmlrpc filename sanitation. Props donncha. fixes #3395

git-svn-id: http://svn.automattic.com/wordpress/trunk@4537 1a063a9b-81f0-0310-95a4-ce76da25c4cd
This commit is contained in:
ryan 2006-11-28 22:03:19 +00:00
parent 04b742e0a2
commit cc238cab45
1 changed files with 2 additions and 2 deletions

View File

@ -817,7 +817,7 @@ class wp_xmlrpc_server extends IXR_Server {
$user_pass = $wpdb->escape($args[2]);
$data = $args[3];
$name = $data['name'];
$name = sanitize_file( $data['name'] );
$type = $data['type'];
$bits = $data['bits'];
@ -841,7 +841,7 @@ class wp_xmlrpc_server extends IXR_Server {
logIO('O', '(MW) Could not write file '.$name);
return new IXR_Error(500, 'Could not write file '.$name);
}
return apply_filters( 'wp_handle_upload', array( 'file' => $name, 'url' => $upload[ 'url' ], 'type' => $type ) );
return apply_filters( 'wp_handle_upload', array( 'file' => $upload[ 'file' ], 'url' => $upload[ 'url' ], 'type' => $type ) );
}