[wp-trac] [WordPress Trac] #12756: WPMU does not handle files with two or more dots in the filename

WordPress Trac wp-trac at lists.automattic.com
Mon Mar 29 07:23:50 UTC 2010


#12756: WPMU does not handle files with two or more dots in the filename
--------------------------+-------------------------------------------------
 Reporter:  Namely        |       Owner:                    
     Type:  defect (bug)  |      Status:  new               
 Priority:  normal        |   Milestone:  MU 2.9.x          
Component:  Upload        |     Version:  2.9.2             
 Severity:  minor         |    Keywords:  WPMU uploads files
--------------------------+-------------------------------------------------
 * WPMU does download images that have two or more dots in the file name
 > E.g., One..jpg One...jpg One....jpg

 rewrites do work (checked)

 * this is clearly a WP issue:
 > /wp-content/blogs.php
 ...
 $file = BLOGUPLOADDIR . str_replace( '..', '', $_GET[ 'file' ] );
 if ( !is_file( $file ) ) {
         status_header( 404 );
         die('404 — File not found.');
 }
 ...
 > WPMU removes two dots!!!

 > workaround:
 $file = BLOGUPLOADDIR . $_GET[ 'file' ]; // name.ly: workaround for files
 with two or more dots

 tested and works fine

-- 
Ticket URL: <http://core.trac.wordpress.org/ticket/12756>
WordPress Trac <http://core.trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list