From 4e6518f3fd8885b095a78a7e78e482b42e1cc901 Mon Sep 17 00:00:00 2001 From: cassiopc Date: Thu, 25 Oct 2012 11:26:35 +0200 Subject: avoid spaces in source names --- boca-1.5.2/src/judge/team.php | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/boca-1.5.2/src/judge/team.php b/boca-1.5.2/src/judge/team.php index 7c204f0..11d03ad 100644 --- a/boca-1.5.2/src/judge/team.php +++ b/boca-1.5.2/src/judge/team.php @@ -38,6 +38,10 @@ if (isset($_FILES["sourcefile"]) && isset($_POST["problem"]) && isset($_POST["Su MSGError("File size exceeds the limit allowed."); ForceLoad($runteam); } + if(strpos($name,' ') === true || strpos($temp,' ') === true) { + MSGError("File name cannot contain spaces."); + ForceLoad($runteam); + } if (!is_uploaded_file($temp) || strlen($name)>100) { IntrusionNotify("file upload problem."); ForceLoad("../index.php"); -- cgit v1.2.3