Version 2.2.2

upload/ips_kernel/class_upload.php

@@ -2,14 +2,22 @@
 
 /*
 +--------------------------------------------------------------------------
-|   Invision Power Board
+|   Invision Power Board 2.2.2
 |   =============================================
 |   by Matthew Mecham
 |   (c) 2001 - 2006 Invision Power Services, Inc.
 |   http://www.invisionpower.com
 |   =============================================
 |   Web: http://www.invisionboard.com
+|        http://www.ibresource.ru/products/invisionpowerboard/
+|   Time: Monday 05th of March 2007 10:10:55 PM
+|   Release: e3790216629e5a2aaf37070b32237f06
 |   Licence Info: http://www.invisionboard.com/?license
+|                  http://www.ibresource.ru/license
++---------------------------------------------------------------------------
+|   INVISION POWER BOARD ÍÅ ßÂËßÅÒÑß ÁÅÑÏËÀÒÍÛÌ ÏÐÎÃÐÀÌÌÍÛÌ ÎÁÅÑÏÅ×ÅÍÈÅÌ!
+|   Ïðàâà íà ÏÎ ïðèíàäëåæàò Invision Power Services
+|   Ïðàâà íà ïåðåâîä IBResource (http://www.ibresource.ru)
 +---------------------------------------------------------------------------
 |   > $Date: 2005-10-10 14:03:20 +0100 (Mon, 10 Oct 2005) $
 |   > $Revision: 22 $
@@ -271,6 +279,12 @@ class class_upload
 			return;
 		}
 		
+		if( !is_uploaded_file($_FILES[ $this->upload_form_field ]['tmp_name']) )
+		{
+			$this->error_no = 1;
+			return;
+		}
+		
 		//-------------------------------------------------
 		// De we have allowed file_extensions?
 		//-------------------------------------------------
@@ -343,7 +357,7 @@ class class_upload
 		
 		if ( $this->make_script_safe )
 		{
-			if ( preg_match( "/\.(cgi|pl|js|asp|php|html|htm|jsp|jar)/", $FILE_NAME ) )
+			if ( preg_match( "/\.(cgi|pl|js|asp|php|html|htm|jsp|jar)$/i", $FILE_NAME ) )
 			{
 				$FILE_TYPE                 = 'text/plain';
 				$this->file_extension      = 'txt';
@@ -429,6 +443,20 @@ class class_upload
 				}
 			}
 		}
+		
+		//-------------------------------------------------
+		// If filesize and $_FILES['size'] don't match then
+		// either file is corrupt, or there was funny
+		// business between when it hit tmp and was moved
+		//-------------------------------------------------
+		
+		if( filesize($this->saved_upload_name) != $_FILES[ $this->upload_form_field ]['size'] )
+		{
+			@unlink( $this->saved_upload_name );
+			
+			$this->error_no = 1;
+			return;
+		}
 	}
 	
 	/*-------------------------------------------------------------------------*/