diff --git a/adminer/include/html.inc.php b/adminer/include/html.inc.php
index e0f13af8..2745c3f0 100644
--- a/adminer/include/html.inc.php
+++ b/adminer/include/html.inc.php
@@ -295,7 +295,7 @@ function process_input(array $field) {
}
$idf = bracket_escape($field["field"]);
$function = idx($_POST["function"], $idf);
- $value = $_POST["fields"][$idf];
+ $value = idx($_POST["fields"], $idf);
if ($field["type"] == "enum" || driver()->enumLength($field)) {
if ($value == -1) {
return false;
diff --git a/plugins/file-upload.php b/plugins/file-upload.php
index b9e0fddc..a82df910 100644
--- a/plugins/file-upload.php
+++ b/plugins/file-upload.php
@@ -1,5 +1,5 @@
and link to the uploaded files from select
* @link https://www.adminer.org/plugins/#use
@@ -30,13 +30,13 @@ class AdminerFileUpload extends Adminer\Plugin {
function processInput($field, $value, $function = "") {
if (preg_match('~(.*)_path$~', $field["field"], $regs)) {
$table = ($_GET["edit"] != "" ? $_GET["edit"] : $_GET["select"]);
- $name = "fields-$field[field]";
- if ($_FILES[$name]["error"] || !preg_match("~(\\.($this->extensions))?\$~", $_FILES[$name]["name"], $regs2)) {
+ $name = $field["field"];
+ if ($_FILES["fields"]["error"][$name] || !preg_match("~(\\.($this->extensions))?\$~", $_FILES["fields"]["name"][$name], $regs2)) {
return false;
}
//! unlink old
$filename = (function_exists('random_bytes') ? bin2hex(random_bytes(8)) : uniqid("", true)) . $regs2[0];
- if (!move_uploaded_file($_FILES[$name]["tmp_name"], "$this->uploadPath$table/$regs[1]-$filename")) {
+ if (!move_uploaded_file($_FILES["fields"]["tmp_name"][$name], $this->uploadPath . Adminer\friendly_url($table) . "/$regs[1]-$filename")) {
return false;
}
return Adminer\q($filename);
@@ -45,7 +45,7 @@ class AdminerFileUpload extends Adminer\Plugin {
function selectVal($val, &$link, $field, $original) {
if ($val != "" && preg_match('~(.*)_path$~', $field["field"], $regs)) {
- $link = "$this->displayPath$_GET[select]/$regs[1]-$val";
+ $link = $this->displayPath . Adminer\friendly_url($_GET["select"]) . "/$regs[1]-$val";
}
}