diff options
| author | Cassio de Campos <cassiopc@gmail.com> | 2018-09-10 06:42:43 +0000 |
|---|---|---|
| committer | Cassio de Campos <cassiopc@gmail.com> | 2018-09-10 06:42:43 +0000 |
| commit | eeb27b48f481d7329c65ffc6beb95730009290ed (patch) | |
| tree | e90fc03f9a17be1ce9c440a0a8271e06d68b68aa /src | |
| parent | f3497452f34af5f90a0902f71d7906472402c2ab (diff) | |
| download | boca-eeb27b48f481d7329c65ffc6beb95730009290ed.tar.gz boca-eeb27b48f481d7329c65ffc6beb95730009290ed.zip | |
clean filenames
Diffstat (limited to 'src')
| -rwxr-xr-x | src/globals.php | 1 | ||||
| -rw-r--r-- | src/team/run.php | 11 |
2 files changed, 10 insertions, 2 deletions
diff --git a/src/globals.php b/src/globals.php index 5183040..a24d8b4 100755 --- a/src/globals.php +++ b/src/globals.php @@ -209,6 +209,7 @@ function sanitizeText($text, $doamp=true) } function sanitizeFilename($text) { + $text = preg_replace('/[^[:print:]]/', '',$text); $text = str_replace("*", "_", $text); $text = str_replace("$", "_", $text); $text = str_replace(")", "_", $text); diff --git a/src/team/run.php b/src/team/run.php index e157419..878f90c 100644 --- a/src/team/run.php +++ b/src/team/run.php @@ -74,7 +74,9 @@ if (isset($_POST["problem"]) && isset($_POST["language"]) && } if(isset($_POST['name']) && $_POST['name'] != '') { - $temp = tempnam("/tmp","bkp-"); + $runsfiles = $_SESSION["locr"] . $ds . "private" . $ds . 'runsfiles'; + @mkdir($runsfiles,0770); + $temp = tempnam($runsfiles,"bkp-"); $fout = fopen($temp,"wb"); fwrite($fout,base64_decode($_POST['data'])); fclose($fout); @@ -111,9 +113,14 @@ if (isset($_POST["problem"]) && isset($_POST["language"]) && MSGError("File name cannot contain spaces."); ForceLoad($runteam); } - if(isset($_POST['pastcode']) && $_POST['pastcode'] != '') + + if(isset($_POST['pastcode']) && $_POST['pastcode'] != '') $shaf = myhtmlspecialchars($_POST["pastcode"]); else $shaf = @sha1_file($temp); + + if(@rename($temp, $temp . "." . sanitizeFilename($shaf))) + $temp = $temp . "." . sanitizeFilename($shaf); + // $ac=array('contest','site','user','problem','lang','filename','filepath'); // $ac1=array('runnumber','rundate','rundatediff','rundatediffans','runanswer','runstatus','runjudge','runjudgesite', // 'runjudge1','runjudgesite1','runanswer1','runjudge2','runjudgesite2','runanswer2', |