X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=blobdiff_plain;f=admin%2Fattachments.php;h=b34cbe33675eb8c23c0103d88bd102967980ea79;hb=5be1b6df68a4ee9a811fb897996bf905d27f8b65;hp=b75c58bf280fa5c5bffe9ec735eb268446f4787a;hpb=2a721693c8b5d1ebf55b51e4ed9396a29a1147b2;p=fa-stable.git diff --git a/admin/attachments.php b/admin/attachments.php index b75c58bf..b34cbe33 100644 --- a/admin/attachments.php +++ b/admin/attachments.php @@ -98,22 +98,24 @@ if ($Mode == 'ADD_ITEM' || $Mode == 'UPDATE_ITEM') fwrite($fp, $index_file); fclose($fp); } + + $filename = basename($_FILES['filename']['name']); + $filesize = $_FILES['filename']['size']; + $filetype = $_FILES['filename']['type']; + // file name compatible with POSIX // protect against directory traversal if ($Mode == 'UPDATE_ITEM') { $unique_name = preg_replace('/[^a-zA-Z0-9.\-_]/', '', $_POST['unique_name']); - if ($Mode == 'UPDATE_ITEM' && file_exists($dir."/".$unique_name)) + if ($filename && file_exists($dir."/".$unique_name)) unlink($dir."/".$unique_name); } else $unique_name = uniqid(''); - move_uploaded_file($tmpname, $dir."/".$unique_name); //save the file - $filename = basename($_FILES['filename']['name']); - $filesize = $_FILES['filename']['size']; - $filetype = $_FILES['filename']['type']; + move_uploaded_file($tmpname, $dir."/".$unique_name); if ($Mode == 'ADD_ITEM') { @@ -128,6 +130,8 @@ if ($Mode == 'ADD_ITEM' || $Mode == 'UPDATE_ITEM') display_notification(_("Attachment has been updated.")); } } + refresh_pager('trans_table'); + $Ajax->activate('_page_body'); $Mode = 'RESET'; }