novabbs
/
rocksolid-light
3
0
Fork 1
Code Issues 22 Pull Requests Releases Wiki Activity

Fix hardcoded spooldir in upload.php

This commit is contained in:
Retro_Guy 2021-07-09 10:12:56 +00:00
parent d3816cc0bc
commit fd8e56db5a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
Rocksolid_Light/spoolnews/upload.php
View File

@ -47,7 +47,7 @@ if(isset($_FILES)) {
// Check auth here // Check auth here
if(isset($_POST['key']) && password_verify($CONFIG['thissitekey'].$_POST['username'], $_POST['key'])) { if(isset($_POST['key']) && password_verify($CONFIG['thissitekey'].$_POST['username'], $_POST['key'])) {
if(check_bbs_auth($_POST['username'], $_POST['password'])) { if(check_bbs_auth($_POST['username'], $_POST['password'])) {
$userdir = '/var/spool/rslight/upload/'.strtolower($_POST[username]); $userdir = $spooldir.'/upload/'.strtolower($_POST[username]);
$upload_to = $userdir.'/'.$_FILES[photo][name]; $upload_to = $userdir.'/'.$_FILES[photo][name];
if(is_file($upload_to)) { if(is_file($upload_to)) {
echo $_FILES[photo][name].' already exists in your folder'; echo $_FILES[photo][name].' already exists in your folder';