MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

use DS in stead of '/'.

pull/61/head
noud 2012-08-21 16:57:42 +02:00
parent b7a5d8a3f8
commit 474058cc24
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/Model/Attribute.php
View File

@ -323,7 +323,7 @@ IF (Attribute.category="External analysis", "j", "k"))))))))))'
if($this->typeIsAttachment($this->data['Attribute']['type'])) {
// FIXME secure this filesystem access/delete by not allowing to change directories or go outside of the directory container.
// only delete the file if it exists
$filepath = APP."files/".$this->data['Attribute']['event_id']."/".$this->data['Attribute']['id'];
$filepath = APP."files".DS.$this->data['Attribute']['event_id'].DS.$this->data['Attribute']['id'];
$file = new File ($filepath);
if($file->exists()) {
if (!$file->delete()) {
@ -601,7 +601,7 @@ IF (Attribute.category="External analysis", "j", "k"))))))))))'
}
function base64EncodeAttachment($attribute) {
$filepath = APP."files/".$attribute['event_id']."/".$attribute['id'];
$filepath = APP."files".DS.$attribute['event_id'].DS.$attribute['id'];
$file = new File($filepath);
if (!$file->exists()) return '';
$content = $file->read();