diff options
| author | Bharat Mediratta <bharat@menalto.com> | 2009-05-16 22:27:32 +0000 |
|---|---|---|
| committer | Bharat Mediratta <bharat@menalto.com> | 2009-05-16 22:27:32 +0000 |
| commit | 8f11bce904d188b29e180a11113b51fdfade60b0 (patch) | |
| tree | 84c35b64a730dc08f959038e3fa8f782df305c01 /core/helpers/album.php | |
| parent | 6ceb10424b4dc1bba6cfc1bd3a17c4428ae9c98c (diff) | |
Don't allow photos, albums or movies to have a trailing period to avoid
security problems. Ref http://dev.kohanaphp.com/issues/684).
This plus r20823 resolves ticket #248.
Diffstat (limited to 'core/helpers/album.php')
| -rw-r--r-- | core/helpers/album.php | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/core/helpers/album.php b/core/helpers/album.php index 1e0d1f7d..362b93d0 100644 --- a/core/helpers/album.php +++ b/core/helpers/album.php @@ -101,7 +101,9 @@ class album_Core { if ($parent->id != 1) { $group->input("dirname")->label(t("Directory Name"))->value($parent->name) ->callback("item::validate_no_slashes") - ->error_messages("no_slashes", t("The directory name can't contain the \"/\" character")); + ->error_messages("no_slashes", t("The directory name can't contain a \"/\"")) + ->callback("item::validate_no_trailing_period") + ->error_messages("no_trailing_period", t("The directory name can't end in \".\"")); } $sort_order = $group->group("sort_order", array("id" => "gAlbumSortOrder")) |