From 5b9c25cf0305a462ef07eb8b60819a573d668757 Mon Sep 17 00:00:00 2001 From: plegall Date: Thu, 6 Nov 2014 09:17:46 +0000 Subject: merge r30375 from trunk to branch 2.7 bug 3171 fixed: no need to double escape the file name from HTML5 upload git-svn-id: http://piwigo.org/svn/branches/2.7@30376 68402e56-0260-453c-a942-63ccdbb3a9ee --- include/ws_functions/pwg.images.php | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/include/ws_functions/pwg.images.php b/include/ws_functions/pwg.images.php index 3a20de082..04ab65f35 100644 --- a/include/ws_functions/pwg.images.php +++ b/include/ws_functions/pwg.images.php @@ -1349,7 +1349,7 @@ function ws_images_upload($params, $service) $image_id = add_uploaded_file( $filePath, - $params['name'], + stripslashes($params['name']), // function add_uploaded_file will secure before insert $params['category'], $params['level'], null // image_id = not provided, this is a new photo -- cgit v1.2.3