Update of /cvs/scoop/scoop/lib/Scoop
In directory lithium.sabren.com:/tmp/cvs-serv25566/lib/Scoop
Modified Files:
Utility.pm
Log Message:
File delete fix. Stop any user with file upload permission being able to
delete admin files.
Index: Utility.pm
===================================================================
RCS file: /cvs/scoop/scoop/lib/Scoop/Utility.pm,v
retrieving revision 1.38
retrieving revision 1.39
diff -C2 -d -r1.38 -r1.39
*** Utility.pm 16 Aug 2006 23:44:06 -0000 1.38
--- Utility.pm 3 Oct 2006 19:36:29 -0000 1.39
***************
*** 55,58 ****
--- 55,91 ----
}
+ =item * delete_user_file($file_name, $uid)
+
+ Deletes a specified file from $uid's files.
+
+ =cut
+ sub delete_user_file {
+ my $S = shift;
+ my $file_name = shift;
+ my $uid = shift || $S->{UID};
+
+ $file_name = $S->clean_filename($file_name);
+
+ my $path = $S->var('upload_path_user') . "$uid/";
+
+ unlink "$path$file_name";
+ }
+
+ =item * delete_admin_file($file_name)
+
+ Deletes a specified admin file.
+
+ =cut
+ sub delete_admin_file {
+ my $S = shift;
+ my $file_name = shift;
+
+ $file_name = $S->clean_filename($file_name);
+
+ my $path = $S->var('upload_path_admin');
+
+ unlink "$path$file_name";
+ }
+
=item * display_upload_form()