Skip to content
Snippets Groups Projects
Commit 0e60685d authored by Uma's avatar Uma Committed by Uma
Browse files

Merge changes with master branch

parent 5a89f907
No related branches found
No related tags found
1 merge request!35737789504 security issue
......@@ -49,6 +49,12 @@ class Settings_Vtiger_CompanyDetailsSave_Action extends Settings_Vtiger_Basic_Ac
$saveLogo = false;
}
//mime type check
$mimeType = vtlib_mime_content_type($logoDetails['tmp_name']);
$mimeTypeContents = explode('/', $mimeType);
if (!$logoDetails['size'] || $mimeTypeContents[0] != 'image' || !in_array($mimeTypeContents[1], Settings_Vtiger_CompanyDetails_Model::$logoSupportedFormats)) {
$saveLogo = false;
}
// Check for php code injection
$imageContents = file_get_contents($logoDetails["tmp_name"]);
if (preg_match('/(<\?php?(.*?))/i', $imageContents) == 1) {
......
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment