gnh1201/seeddms-code
1
0
Fork 0
mirror of https://git.code.sf.net/p/seeddms/code synced 2025-02-11 17:44:56 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge branch 'seeddms-4.3.4' into develop

Browse Source
This commit is contained in:
Uwe Steinmann 2014-02-28 12:02:05 +01:00
commit ceb62a75d8
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
CHANGELOG
View File

@ -9,7 +9,7 @@
- unlinked documents/folders can be moved into root folder
- take out debug echo statement (Bug #125)
- fix some errors in notification mails
- fix some security holes
- fix some security holes (found by Craig Arendt, Stratum Security)
- add initial version of REST api
--------------------------------------------------------------------------------

6
op/op.AddFile2.php
View File

@ -42,20 +42,20 @@ if( move_uploaded_file( $source_file_path, $target_file_path ) ) {
fclose($fpnew);
if (!isset($_POST["documentid"]) || !is_numeric($_POST["documentid"]) || intval($_POST["documentid"])<1) {
echo getMLText("invalid_doc_id");
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$documentid = $_POST["documentid"];
$document = $dms->getDocument($documentid);
if (!is_object($document)) {
echo getMLText("invalid_doc_id");
UI::exitError(getMLText("document_title", array("documentname" => getMLText("invalid_doc_id"))),getMLText("invalid_doc_id"));
}
$folder = $document->getFolder();
if ($document->getAccessMode($user) < M_READWRITE) {
echo getMLText("access_denied");
UI::exitError(getMLText("document_title", array("documentname" => $document->getName())),getMLText("access_denied"));
}
$userfiletmp = $settings->_stagingDir.$fileId;