thedevstack/httpupload
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

storage-backend: load parameters only once while deleting a file

Browse source
This commit is contained in:
steckbrief 2017-05-27 20:32:12 +02:00
parent 16d3261f03
commit 6bd2862f8f
1 changed files with 3 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

6
storage-backend/index.php
View file

@ -164,9 +164,9 @@ switch ($method) {
sendHttpReturnCodeAndJson(403, 'Server is not allowed to delete a file');
}
$slotParameters = loadSlotParameters($slotUUID, $config);
if ($config['delete_only_by_creator']) {
$slotParameters = loadSlotParameters($slotUUID, $config);
if ($slotParameters['user_jid'] != $userJid) {
if (getBareJid($slotParameters['user_jid']) != getBareJid($userJid)) {
sendHttpReturnCodeAndJson(403, "Deletion of that file is only allowed by the user created it.");
}
}
@ -174,7 +174,7 @@ switch ($method) {
if (!slotExists($slotUUID, $config)) {
sendHttpReturnCodeAndJson(403, "The slot does not exist.");
}
$slotParameters = loadSlotParameters($slotUUID, $config);
if (!checkFilenameParameter($filename, $slotParameters)) {
sendHttpReturnCodeAndJson(403, "Filename to delete differs from requested slot filename.");
}