* Disallow uploading any files with ".php." in the filename

+ (garvinhicking)
2009-11-16 12:30:30 +00:00
parent 2512cc60b2
commit 2796d24b34
2 changed files with 4 additions and 1 deletions
--- a/include/functions_images.inc.php
+++ b/include/functions_images.inc.php
@ -24,7 +24,7 @@ function serendipity_isActiveFile($file) {
        return true;
    }

-    $core = preg_match('@\.(php[345]?|[psj]html?|aspx?|cgi|jsp|py|pl)$@i', $file);
+    $core = preg_match('@\.(php.*|[psj]html?|aspx?|cgi|jsp|py|pl)$@i', $file);
    if ($core) {
        return true;
    }