Prohibited uploading of certain files

vasil-sokolov · vasil-sokolov · commit 547353b7ca27 · 2023-09-08T14:47:11.000+02:00
diff --git a/Module.php b/Module.php
@@ -596,7 +596,7 @@ public function onAfterRename(&$aArgs, &$mResult)
             $UserId = $aArgs['UserId'];
             Api::CheckAccess($UserId);
 
-            if (self::isFileAllowed($aArgs['Name'])) {
+            if (!self::isFileAllowed($aArgs['Name'])) {
                 throw new \Aurora\System\Exceptions\ApiException(\Aurora\System\Notifications::CanNotUploadFileErrorData);
             }
 
@@ -664,7 +664,7 @@ public function onAfterMove(&$aArgs, &$mResult)
                 if (!$bIntoItself) {
                     $sNewName = isset($aItem['NewName']) ? $aItem['NewName'] : $aItem['Name'];
 
-                    if (self::IsFileAllowed(basename($sNewName))) {
+                    if (!self::IsFileAllowed(basename($sNewName))) {
                         throw new \Aurora\System\Exceptions\ApiException(\Aurora\System\Notifications::CanNotUploadFileErrorData);
                     }
 

Original file line number	Diff line number	Diff line change
`@@ -596,7 +596,7 @@ public function onAfterRename(&$aArgs, &$mResult)`
`596`	`596`	`$UserId = $aArgs['UserId'];`
`597`	`597`	`Api::CheckAccess($UserId);`
`598`	`598`
`599`		`- if (self::isFileAllowed($aArgs['Name'])) {`
	`599`	`+ if (!self::isFileAllowed($aArgs['Name'])) {`
`600`	`600`	`throw new \Aurora\System\Exceptions\ApiException(\Aurora\System\Notifications::CanNotUploadFileErrorData);`
`601`	`601`	`}`
`602`	`602`
`@@ -664,7 +664,7 @@ public function onAfterMove(&$aArgs, &$mResult)`
`664`	`664`	`if (!$bIntoItself) {`
`665`	`665`	`$sNewName = isset($aItem['NewName']) ? $aItem['NewName'] : $aItem['Name'];`
`666`	`666`
`667`		`- if (self::IsFileAllowed(basename($sNewName))) {`
	`667`	`+ if (!self::IsFileAllowed(basename($sNewName))) {`
`668`	`668`	`throw new \Aurora\System\Exceptions\ApiException(\Aurora\System\Notifications::CanNotUploadFileErrorData);`
`669`	`669`	`}`
`670`	`670`