aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
-rw-r--r--admin/thumbnail.php8
1 files changed, 8 insertions, 0 deletions
diff --git a/admin/thumbnail.php b/admin/thumbnail.php
index 60982caa6..3e1b78f98 100644
--- a/admin/thumbnail.php
+++ b/admin/thumbnail.php
@@ -213,6 +213,14 @@ foreach ($fs['elements'] as $path)
{
$dirname = dirname($path);
$filename = basename($path);
+
+ // only files matching the authorized filename pattern can be considered
+ // as "without thumbnail"
+ if (!preg_match('/^[a-zA-Z0-9-_.]+$/', $filename))
+ {
+ continue;
+ }
+
// searching the element
$filename_wo_ext = get_filename_wo_extension($filename);
$tn_ext = '';