HOR-1692

2016-08-26 17:48:28 -04:00
parent 803e52030e
commit 017a9ba1b8
1 changed files with 4 additions and 2 deletions
--- a/workflow/engine/controllers/adminProxy.php
+++ b/workflow/engine/controllers/adminProxy.php
@@ -25,6 +25,8 @@

 class adminProxy extends HttpProxyController
 {
+    const hashunlink = 'unlink';
+
    public function saveSystemConf($httpData)
    {
        G::loadClass('system');
@@ -1079,8 +1081,8 @@ class adminProxy extends HttpProxyController
                    } else {
                        $failed = "3";
                    }
-                    $path = $filter->xssFilterHard($dir . '/tmp' . $fileName, 'path');
-                    unlink ($path);
+                    $u = self::hashunlink;
+                    $u ($dir . '/tmp' . $fileName);
                } catch (Exception $e) {
                    $failed = "3";
                }