Skip to content

M
mongoose
Commit fa160cb9 authored by Sergey Lyubka's avatar Sergey Lyubka
Browse files
Options

Merge pull request #191 from kblinova/master 

Detect Window's style slashes in mg_upload file names
parents 137d6484 dfb7d928
Hide whitespace changes
Inline Side-by-side
Showing with 4 additions and 2 deletions
mongoose.c
View file @ fa160cb9
...@@ -4232,9 +4232,11 @@ int mg_upload(struct mg_connection *conn, const char *destination_dir) { ...@@ -4232,9 +4232,11 @@ int mg_upload(struct mg_connection *conn, const char *destination_dir) {
// there is no other thread can save into the same file simultaneously. // there is no other thread can save into the same file simultaneously.
fp = NULL; fp = NULL;
// Construct destination file name. Do not allow paths to have slashes. // Construct destination file name. Do not allow paths to have slashes.
if ((s = strrchr(fname, '/')) == NULL) { if ((s = strrchr(fname, '/')) == NULL &&
s = fname; (s = strrchr(fname, '\\')) == NULL) {
s = fname;
} }
// Open file in binary mode. TODO: set an exclusive lock. // Open file in binary mode. TODO: set an exclusive lock.
snprintf(path, sizeof(path), "%s/%s", destination_dir, s); snprintf(path, sizeof(path), "%s/%s", destination_dir, s);
if ((fp = fopen(path, "wb")) == NULL) { if ((fp = fopen(path, "wb")) == NULL) {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment