From 768f0f6a1ec5aaaa576fdc1bd283973a8a5ffc89 Mon Sep 17 00:00:00 2001 From: Horus3 Date: Thu, 27 Mar 2014 00:22:55 +0100 Subject: Fixed upload(); --- www/functions/func_upload.php | 25 ++++--------------------- 1 file changed, 4 insertions(+), 21 deletions(-) (limited to 'www/functions/func_upload.php') diff --git a/www/functions/func_upload.php b/www/functions/func_upload.php index 8059191..674b4cd 100755 --- a/www/functions/func_upload.php +++ b/www/functions/func_upload.php @@ -1,20 +1,5 @@ -
-

File :

- -

PWD:

-

Share: -

-
- -*/ - function database_upload($db, $parentdir, $owner, $filename, $folder, $mime, $size, $share, $filehash){ if($db->exec(" BEGIN TRANSACTION; @@ -27,7 +12,9 @@ function database_upload($db, $parentdir, $owner, $filename, $folder, $mime, $si } } -function upload($db){ +function upload($path){ + + $db = $GLOBALS["db"]; if(!$_SESSION["login"]){ return UPLOAD_LOGIN; @@ -37,11 +24,7 @@ function upload($db){ return UPLOAD_UPLOAD; } - $parentdir = select_file_id($db, $_SESSION["userid"], $_POST["path"]); - //$parentdir = SQLite3::escapeString("$_POST[pwd]"); - if(!preg_match("/[0-9]+/", $parentdir)){ - return UPLOAD_PARENTFOLDER; - } + $parentdir = select_file_id($db, $_SESSION["userid"], $path); $folder_owner_db = $db->query("SELECT owner FROM files WHERE id=".$parentdir.";"); $folder_owner_ar = $folder_owner_db->fetchArray(SQLITE3_NUM); -- cgit v1.2.3