diff --git a/modules/Emails/views/MassSaveAjax.php b/modules/Emails/views/MassSaveAjax.php index db74b8a1f015b44c34be00cb2da08464d0eaa8a6..0bc9a8b4b7576d4159c9f974819ff1ecd5461abc 100644 --- a/modules/Emails/views/MassSaveAjax.php +++ b/modules/Emails/views/MassSaveAjax.php @@ -220,6 +220,7 @@ class Emails_MassSaveAjax_View extends Vtiger_Footer_View { $encryptFileName = Vtiger_Util_Helper::getEncryptedFileName($binFile); $newFilePath = $upload_file_path . $current_id . "_" . $encryptFileName; + Vtiger_Utils::checkFileAccess($oldFilePath); copy($oldFilePath, $newFilePath); $sql1 = "insert into vtiger_crmentity (crmid,smcreatorid,smownerid,setype,description,createdtime,modifiedtime) values(?, ?, ?, ?, ?, ?, ?)";