Changeset 527

Timestamp:

05/24/08 17:27:20 (5 years ago)

Author:

Tatzelwurm

Message:

Kein "rn" Problem mehr bei fehlerhaften Eingaben

Files:

• downloadDatabase/files/lib/acp/form/DownloadDBDataAddForm.class.php (modified) (9 diffs)

downloadDatabase/files/lib/acp/form/DownloadDBDataAddForm.class.php

@@ -11 +11 @@
  * 
  * @author              Robert "Tatzelwurm" Hempel
- * @copyright   2007/2008 INSIDE das Hrspiel
+ * @copyright   2007/2008 INSIDE das Hörspiel
  * @license     GNU Lesser General Public License <http://opensource.org/licenses/lgpl-license.php>
  * @package             de.inside.wcf.downloaddb
@@ -61 +61 @@
                                 
                 if (isset($_POST['katID']))                     $this->katID            = intval($_REQUEST['katID']);
-                if (isset($_POST['name']))                      $this->name                     = escapeString(StringUtil::trim($_REQUEST['name']));
-                if (isset($_POST['description']))       $this->description      = escapeString(StringUtil::trim($_POST['description']));
+                if (isset($_POST['name']))                      $this->name                     = StringUtil::trim($_REQUEST['name']);
+                if (isset($_POST['description']))       $this->description      = StringUtil::trim($_POST['description']);
                 if (isset($_POST['previewIMG']))        $this->previewIMG       = StringUtil::encodeHTML($_POST['previewIMG']);
                 if (isset($_POST['previewFile']))       $this->previewFile      = StringUtil::encodeHTML($_POST['previewFile']);
@@ -80 +80 @@
                 if (isset($_FILES['previewArray']))     $this->previewArray = $_FILES['previewArray'];
                 // Action
-                if (isset($_POST['action']))            $this->action           = escapeString($_POST['action']);
+                if (isset($_POST['action']))            $this->action           = StringUtil::toLowerCase(escapeString($_POST['action']));
         }
         
@@ -135 +135 @@
                                         // import file
                                         $this->dataID = DownloadDBDataEditor::createFile($this->upload['tmp_name'], $this->upload['name'], $this->upload['type'], 'upload');
-                                        $this->groesse = $this->upload['size'];
+                                        $this->groesse = intval($this->upload['size']);
                                 } else {
                                         throw new UserInputException('upload');
@@ -150 +150 @@
                                                         }
                                                         $this->groesse = @filesize($_SERVER['DOCUMENT_ROOT'].$this->link);
-                                                        $this->mimeType = '';
 // Funktioniert nur wenn "fileinfo" in php aktiviert ist!! 
 //                                                      $finfo = @finfo_open(FILEINFO_MIME); // return mime type ala mimetype extension
 //                                                      $this->mimeType = @finfo_file($finfo, $_SERVER['DOCUMENT_ROOT'].$this->link);
+                                                        $this->mimeType = ''; /*#### Entfernen wenn fileinfo aktiv ist ###*/
 // daher ist $mimeType = '';
                                                 }
@@ -168 +168 @@
 // Funktioniert nur wenn "fileinfo" in php aktiviert ist!! 
 //                                                      $finfo = @finfo_open(FILEINFO_MIME); // return mime type ala mimetype extension
-//                                                      $this->mimeType = finfo_file($finfo, $this->link);
+//                                                      $this->mimeType = @finfo_file($finfo, $_SERVER['DOCUMENT_ROOT'].$this->link);
+                                                        $this->mimeType = ''; /*#### Entfernen wenn fileinfo aktiv ist ###*/
 // daher ist $mimeType = '';
                                                 }
@@ -205 +206 @@
                                         $dataset->updateDataset(array(
                                                         'katID'                 => intval($this->katID),
-                                                        'name'                  => $this->name,
-                                                        'description'   => $this->description,
+                                                        'name'                  => escapeString($this->name),
+                                                        'description'   => escapeString($this->description),
                                                         'previewIMG'    => escapeString($this->previewIMG),
                                                         'previewFile'   => StringUtil::encodeHTML($this->previewFile),
@@ -229 +230 @@
                                 // dataID = NULL
                                 //Create new Dataset if no file is given
-                                $dataset = DownloadDBDataEditor::createDataset(intval($this->katID), $this->name, $this->description ,array(
+                                $dataset = DownloadDBDataEditor::createDataset(intval($this->katID), escapeString($this->name), escapeString($this->description) ,array(
                                                         'link'                  => $this->link,
                                                         'fileName'              => escapeString($this->fileName),
@@ -308 +309 @@
                         'katOptions'    => $this->katOptions,
                         'katID'                 => $this->katID,
-                        'name'                  => stripslashes($this->name),
-                        'description'   => stripslashes($this->description),
+                        'name'                  => $this->name,
+                        'description'   => $this->description,
                         'previewIMG'    => $this->previewIMG,
                         'previewFile'   => $this->previewFile,