issue #59 security fix

dokuwiki · Sep 6, 2011 · 6223179 · 6223179
1 parent 9ea9cc5
commit 6223179
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/inc/media.php b/inc/media.php
@@ -247,7 +247,7 @@ function media_upload_xhr($ns,$auth){
     fclose($input);
     if ($realSize != (int)$_SERVER["CONTENT_LENGTH"]) return false;
     if (!($tmp = io_mktmpdir())) return false;
-    $path = $tmp.'/'.$id;
+    $path = $tmp.'/'.md5($id);
     $target = fopen($path, "w");
     fseek($temp, 0, SEEK_SET);
     stream_copy_to_stream($temp, $target);