Nemcio/adminer
1
0
Fork 0
mirror of https://github.com/vrana/adminer.git synced 2026-07-09 07:23:05 +02:00
Code Issues Packages Projects Releases Activity

AdminerFileUpload: Replace invalid characters in table name

Browse Source
This commit is contained in:
Jakub Vrana
2025-09-07 16:18:57 +02:00
parent 7ef0949539
commit 6c662e1f96
2 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
adminer/include/html.inc.php
View File

@@ -295,7 +295,7 @@ function process_input(array $field) {
}
$idf = bracket_escape($field["field"]);
$function = idx($_POST["function"], $idf);
$value = $_POST["fields"][$idf];
$value = idx($_POST["fields"], $idf);
if ($field["type"] == "enum" || driver()->enumLength($field)) {
if ($value == -1) {
return false;

10
plugins/file-upload.php
View File

@@ -1,5 +1,5 @@
<?php
//! delete
//! handle delete
/** Edit fields ending with "_path" by <input type="file"> and link to the uploaded files from select
* @link https://www.adminer.org/plugins/#use
@@ -30,13 +30,13 @@ class AdminerFileUpload extends Adminer\Plugin {
function processInput($field, $value, $function = "") {
if (preg_match('~(.*)_path$~', $field["field"], $regs)) {
$table = ($_GET["edit"] != "" ? $_GET["edit"] : $_GET["select"]);
$name = "fields-$field[field]";
if ($_FILES[$name]["error"] || !preg_match("~(\\.($this->extensions))?\$~", $_FILES[$name]["name"], $regs2)) {
$name = $field["field"];
if ($_FILES["fields"]["error"][$name] || !preg_match("~(\\.($this->extensions))?\$~", $_FILES["fields"]["name"][$name], $regs2)) {
return false;
}
//! unlink old
$filename = (function_exists('random_bytes') ? bin2hex(random_bytes(8)) : uniqid("", true)) . $regs2[0];
if (!move_uploaded_file($_FILES[$name]["tmp_name"], "$this->uploadPath$table/$regs[1]-$filename")) {
if (!move_uploaded_file($_FILES["fields"]["tmp_name"][$name], $this->uploadPath . Adminer\friendly_url($table) . "/$regs[1]-$filename")) {
return false;
}
return Adminer\q($filename);
@@ -45,7 +45,7 @@ class AdminerFileUpload extends Adminer\Plugin {
function selectVal($val, &$link, $field, $original) {
if ($val != "" && preg_match('~(.*)_path$~', $field["field"], $regs)) {
$link = "$this->displayPath$_GET[select]/$regs[1]-$val";
$link = $this->displayPath . Adminer\friendly_url($_GET["select"]) . "/$regs[1]-$val";
}
}