Changeset 22863

Timestamp:

2013/06/19 16:59:50 (10 years ago)

Author:

m_uehara

Message:

#2266 入力チェック修正

File:

• branches/version-2_12-dev/data/class/pages/LC_Page_ResizeImage.php (modified) (1 diff)

branches/version-2_12-dev/data/class/pages/LC_Page_ResizeImage.php

@@ -106 +106 @@
      */
     function lfCheckFileName() {
-        //$pattern = '|^[0-9]+_[0-9a-z]+\.[a-z]{3}$|';
-        $pattern = '|\./|';
         $file    = trim($_GET['image']);
-        if (preg_match_all($pattern, $file, $matches)) {
+        if (!preg_match("/^[[:alnum:]_\.-]+$/i", $file)) {
             return false;
         } else {