gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-06-18 02:59:27 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

check checksum of document version

Browse Source
This commit is contained in:
Uwe Steinmann 2021-01-26 13:30:15 +01:00
parent 4b91c390c3
commit 8a2224b669
2 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG
View File

@ -6,6 +6,8 @@
- fix potential clickjacking attack with manipulated email address of a user - fix potential clickjacking attack with manipulated email address of a user
- loading more items on ViewFolder page obeys sort order - loading more items on ViewFolder page obeys sort order
- fix possible csrf attacks due to missing form token - fix possible csrf attacks due to missing form token
- show an error msg on the documents detail page if the checksum of version
mismatch
-------------------------------------------------------------------------------- --------------------------------------------------------------------------------
Changes in version 5.1.21 Changes in version 5.1.21

5
views/bootstrap/class.ViewDocument.php
View File

@ -588,6 +588,11 @@ class SeedDMS_View_ViewDocument extends SeedDMS_Bootstrap_Style {
exit; exit;
} }
$checksum = SeedDMS_Core_File::checksum($dms->contentDir, $latestContent->getPath());
if($checksum != $latestContent->getChecksum()) {
$this->errorMsg(getMLText('wrong_checksum'));
}
$txt = $this->callHook('preLatestVersionTab', $latestContent); $txt = $this->callHook('preLatestVersionTab', $latestContent);
if(is_string($txt)) if(is_string($txt))
echo $txt; echo $txt;