Validaciones nuevas incidencias reporte veracode 29-04-15

This commit is contained in:
marcelo.cuiza
2015-04-30 17:59:34 -04:00
parent dbc0114b06
commit 5ca20ccc5e

View File

@@ -310,12 +310,8 @@ class G
while (! @is_dir( dirname( end( $folder_path ) ) ) && dirname( end( $folder_path ) ) != '/' && dirname( end( $folder_path ) ) != '.' && dirname( end( $folder_path ) ) != '') {
array_push( $folder_path, dirname( end( $folder_path ) ) ); //var_dump($folder_path); die;
}
G::LoadSystem('inputfilter');
$filter = new InputFilter();
while ($parent_folder_path = array_pop( $folder_path )) {
$parent_folder_path = $filter->validateInput($parent_folder_path,"path");
if (! @is_dir( $parent_folder_path )) {
if (! @mkdir( $parent_folder_path, $rights)) {
error_log( "Can't create folder \"$parent_folder_path\"");
@@ -2722,10 +2718,6 @@ class G
$image = $inputFn( $path );
imagecopyresampled( $image_p, $image, 0, 0, 0, 0, $resWidth, $resHeight, $width, $height );
$outputFn( $image_p, $saveTo );
G::LoadSystem('inputfilter');
$filter = new InputFilter();
$saveTo = $filter->validateInput($saveTo, "path");
@chmod( $saveTo, 0666 );
}
@@ -3145,7 +3137,7 @@ class G
G::LoadSystem('inputfilter');
$filter = new InputFilter();
$c = $filter->xssFilterHard($c);
print ('<script language=\'javascript\'>{$c}</script>') ;
print ('<script language=\'javascript\'>{'.$c.'}</script>') ;
}
/**