Fixed issue: Security problems with uploaded files in administration

LimeSurvey · Mar 9, 2013 · 9b5f845 · 9b5f845
1 parent 85d05f5
commit 9b5f845
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/application/controllers/admin/questiongroup.php b/application/controllers/admin/questiongroup.php
@@ -47,7 +47,7 @@ function import()
             $importgroup .= "\n";
 
             $sFullFilepath = Yii::app()->getConfig('tempdir') . DIRECTORY_SEPARATOR . randomChars(20);
-            $aPathInfo = pathinfo($sFullFilepath);
+            $aPathInfo = pathinfo($_FILES['the_file']['name']);
             $sExtension = $aPathInfo['extension'];
 
             if (!@move_uploaded_file($_FILES['the_file']['tmp_name'], $sFullFilepath))