Skip to content
Snippets Groups Projects
Commit 887788b1 authored by Apparao G's avatar Apparao G
Browse files

#1790:Fixed - Security Issue:RCE in company logo with webservice api

parent 3ac48970
No related branches found
No related tags found
No related merge requests found
......@@ -37,8 +37,8 @@ class Settings_Vtiger_CompanyDetailsSave_Action extends Settings_Vtiger_Basic_Ac
$logoDetails = $_FILES['logo'];
$saveLogo = Vtiger_Functions::validateImage($logoDetails);
global $upload_badext;// from config.inc.php
$binFileName = sanitizeUploadFileName($logoDetails['name'], $upload_badext);
if ($saveLogo && pathinfo($binFileName, PATHINFO_EXTENSION) != 'txt') {
$logoName = sanitizeUploadFileName($logoDetails['name'], $upload_badext);
if ($saveLogo && pathinfo($logoName, PATHINFO_EXTENSION) != 'txt') {
$moduleModel->saveLogo($logoName);
} else {
$saveLogo = false;
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment