From: Janusz Dobrowolski <janusz@frontaccounting.eu>
Date: Tue, 7 Dec 2010 08:02:02 +0000 (+0000)
Subject: Fixed uploaded file name test
X-Git-Tag: v2.4.2~19^2~431
X-Git-Url: https://delta.frontaccounting.com/gitweb/?a=commitdiff_plain;h=713d60b36c952af50d7228539342388ac3d799f5;p=fa-stable.git

Fixed uploaded file name test
---

diff --git a/admin/backups.php b/admin/backups.php
index 63200f6a..2193486b 100644
--- a/admin/backups.php
+++ b/admin/backups.php
@@ -149,9 +149,9 @@ if (get_post('deldump')) {
 if (get_post('upload'))
 {
 	$tmpname = $_FILES['uploadfile']['tmp_name'];
-	$fname = clean_file_name($_FILES['uploadfile']['name']);
+	$fname = trim(basename($_FILES['uploadfile']['name']));
 
-	if (!preg_match("/.sql(.zip|.gz)?$/", $fname))
+	if (!preg_match("/\.sql(\.zip|\.gz)?$/", $fname))
 		display_error(_("You can only upload *.sql backup files"));
 	elseif (is_uploaded_file($tmpname)) {
 		rename($tmpname, BACKUP_PATH . $fname);