diff --git a/dist.json b/dist.json index e0c4b20..5ab37cb 100644 --- a/dist.json +++ b/dist.json @@ -3,7 +3,7 @@ "allowErrors": false }, "dest": "dist", - "pkgVersion": "1.5.1", + "pkgVersion": "1.5.2", "banners": [ "banners/malware_scans.swig", "banners/donations.swig" diff --git a/package.json b/package.json index c3ce950..5eafc44 100644 --- a/package.json +++ b/package.json @@ -1,6 +1,6 @@ { "name": "uguu", - "version": "1.5.1", + "version": "1.5.2", "description": "Kawaii file host", "homepage": "https://uguu.se/", "repository": { diff --git a/static/php/includes/Core.namespace.php b/static/php/includes/Core.namespace.php index b566533..1626ff2 100644 --- a/static/php/includes/Core.namespace.php +++ b/static/php/includes/Core.namespace.php @@ -347,7 +347,7 @@ namespace Core { 'VALUES (:hash, :orig, :name, :size, :date, :ip)' ); $q->bindValue(':hash', Upload::$SHA1, PDO::PARAM_STR); - $q->bindValue(':orig', strip_tags(Upload::$FILE_NAME), PDO::PARAM_STR); + $q->bindValue(':orig', Upload::$FILE_NAME, PDO::PARAM_STR); $q->bindValue(':name', Upload::$NEW_NAME_FULL, PDO::PARAM_STR); $q->bindValue(':size', Upload::$FILE_SIZE, PDO::PARAM_INT); $q->bindValue(':date', time(), PDO::PARAM_STR); diff --git a/static/php/includes/Upload.class.php b/static/php/includes/Upload.class.php index c81b671..9fb5e0f 100644 --- a/static/php/includes/Upload.class.php +++ b/static/php/includes/Upload.class.php @@ -45,7 +45,7 @@ class Upload $files = self::diverseArray($files); foreach ($files as $file) { - self::$FILE_NAME = $file['name']; + self::$FILE_NAME = strip_tags($file['name']); self::$FILE_SIZE = $file['size']; self::$TEMP_FILE = $file['tmp_name']; self::$SHA1 = sha1_file(self::$TEMP_FILE);