mirror of
https://github.com/neocities/neocities.git
synced 2025-04-28 11:12:30 +02:00
Fix for @violasong's broken garlic
This commit is contained in:
parent
4e4ef8799d
commit
1e7d218252
1 changed files with 8 additions and 8 deletions
4
app.rb
4
app.rb
|
@ -130,7 +130,7 @@ post '/site_files/upload' do
|
|||
halt slim(:'site_files/new')
|
||||
end
|
||||
|
||||
sanitized_filename = params[:newfile][:filename].gsub(/[^a-zA-Z_\-.]/, '')
|
||||
sanitized_filename = params[:newfile][:filename].gsub(/[^a-zA-Z0-9_\-.]/, '')
|
||||
|
||||
dest_path = File.join(site_base_path(current_site.username), sanitized_filename)
|
||||
FileUtils.mv params[:newfile][:tempfile].path, dest_path
|
||||
|
@ -142,7 +142,7 @@ end
|
|||
|
||||
post '/site_files/delete' do
|
||||
require_login
|
||||
sanitized_filename = params[:filename].gsub(/[^a-zA-Z_\-.]/, '')
|
||||
sanitized_filename = params[:filename].gsub(/[^a-zA-Z0-9_\-.]/, '')
|
||||
FileUtils.rm File.join(site_base_path(current_site.username), sanitized_filename)
|
||||
flash[:success] = "Deleted file #{params[:filename]}."
|
||||
redirect '/dashboard'
|
||||
|
|
Loading…
Add table
Reference in a new issue