Skip to content

Commit

Permalink
Merge branch 'refs/heads/master' into demo
Browse files Browse the repository at this point in the history
  • Loading branch information
David McReynolds committed Mar 6, 2012
2 parents 869250c + b67aa65 commit 0055511
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion fuel/modules/fuel/controllers/module.php
Expand Up @@ -1440,7 +1440,7 @@ protected function _process_uploads($posted = NULL)

//$config['xss_clean'] = TRUE; // causes problem with image if true... so we use the below method
$tmp_file = file_get_contents($file_info['tmp_name']);
if ($this->sanitize_images AND xss_clean($tmp_file, TRUE) === FALSE)
if ($this->sanitize_images AND is_image_file($config['file_name']) AND xss_clean($tmp_file, TRUE) === FALSE)
{
$errors = TRUE;
add_error(lang('upload_invalid_filetype'));
Expand Down

0 comments on commit 0055511

Please sign in to comment.