› ›
CRITICAL SECURITY VERSION UPDATE:
https://github.com/daylightstudio/FUEL-CMS/releases/tag/1.4.13

Model Sanitize clean problems

lstableslstables
edited May 2012 in Bug Reports
Hi,

I am currently building a model which has text inputs, a pdf upload and image upload fields.
Now i have built the form I have been trying to make it secure for upload.

I have found that if I upload a file, either a PDF or Image with a bad file name i.e test3^&.2@.jpg or testthis pdf.pdf the files get cleaned and then get placed in the specified folder on the server but when the filename gets stored in the database its the unclean origional.

How can I stop this? The database filename needs to be the same as the one thats been cleaned and uploaded to the server.

Thanks

Comments

  • adminadmin
    edited 2:50PM
    Do you have the latest version from GitHub?
  • lstableslstables
    edited 2:50PM
    Hi Thanks for the speedy reply.

    No, I have been working on this project since october. Will the updated files effect the current project?
  • lstableslstables
    edited 2:50PM
    Could I just replace the fixed files instead of a full update? if so which files would i need?
  • adminadmin
    edited 2:50PM
    I would try replacing the fuel/modules/fuel/controllers/module.php file and see if that fixes the issue.
  • lstableslstables
    edited 2:50PM
    Thats worked great!

    Much appreciated.
Sign In or Register to comment.