From 071571dcee7ed0c4e8241b0022d604f506160d27 Mon Sep 17 00:00:00 2001 From: denisb <denisb@a-working-class-hero-is-something-to.be> Date: Fri, 1 Apr 2011 22:39:26 +0000 Subject: [PATCH] soyons plus restrictif encore sur une possible extension (report de [46222]). --- config/ecran_securite.php | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/config/ecran_securite.php b/config/ecran_securite.php index 5eb96ff9a6..6e3448a19f 100644 --- a/config/ecran_securite.php +++ b/config/ecran_securite.php @@ -5,7 +5,7 @@ * ------------------ */ -define('_ECRAN_SECURITE', '1.0.2'); // 29 mars 2011 +define('_ECRAN_SECURITE', '1.0.3'); // 31 mars 2011 /* * Documentation : http://www.spip.net/fr_article4200.html @@ -201,7 +201,7 @@ AND $_REQUEST['op'] !== preg_replace('/[^\-\w]/', '', $_REQUEST['op'])) if (count($_FILES)){ foreach($_FILES as $k=>$v){ if (preg_match(',^fichier_\d+$,',$k) - AND preg_match(',[.]php3?($|[.]),i',$v['name'])) + AND preg_match(',\.php,i',$v['name'])) unset($_FILES[$k]); } } -- GitLab