Merge branch 'MDL-69257-310' of git://github.com/mihailges/moodle int…

…o MOODLE_310_STABLE
moodle · Oct 9, 2020 · 05a3e35 · 05a3e35
2 parents b2a3820 + 0305839
commit 05a3e35
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/h5p/ajax.php b/h5p/ajax.php
@@ -78,6 +78,17 @@
         $token = required_param('token', PARAM_RAW);
         $contentid = required_param('contentId', PARAM_INT);
 
+        $maxsize = get_max_upload_file_size($CFG->maxbytes);
+        // Check size of each uploaded file and scan for viruses.
+        foreach ($_FILES as $uploadedfile) {
+            $filename = clean_param($uploadedfile['name'], PARAM_FILE);
+            if ($uploadedfile['size'] > $maxsize) {
+                H5PCore::ajaxError(get_string('maxbytesfile', 'error', ['file' => $filename, 'size' => display_size($maxsize)]));
+                return;
+            }
+            \core\antivirus\manager::scan_file($uploadedfile['tmp_name'], $filename, true);
+        }
+
         $editor->ajax->action(H5PEditorEndpoints::FILES, $token, $contentid);
         break;