From a1ded1d93c458174aa1e5e6e2fe0104a2db91f7f Mon Sep 17 00:00:00 2001
From: Hector Cortez <hector@colosa.com>
Date: Tue, 25 Jan 2011 19:53:57 +0000
Subject: [PATCH] Validation of file formats of images and other binary.

---
 .../engine/methods/outputdocs/outputdocs_Ajax.php   | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/workflow/engine/methods/outputdocs/outputdocs_Ajax.php b/workflow/engine/methods/outputdocs/outputdocs_Ajax.php
index 08aa4ccba..c11796562 100644
--- a/workflow/engine/methods/outputdocs/outputdocs_Ajax.php
+++ b/workflow/engine/methods/outputdocs/outputdocs_Ajax.php
@@ -1,4 +1,5 @@
 <?
+    
 $action = isset($POST['action'])? $POST['action']: isset($_GET['action'])? $_GET['action']: '';
 
 switch($action){
@@ -15,14 +16,18 @@ switch($action){
   break;
   
   case 'getTemplateFile':
-    $aExtensions = array ( "exe", "com", "dll", "ocx", "fon", "ttf", "doc", "xls", "mdb", "rtf",
+    $aExtensions = array ( "exe", "com", "dll", "ocx", "fon", "ttf", "doc", "xls", "mdb", "rtf", "bin",
                           "jpeg", "jpg", "jif", "jfif", "gif", "tif", "tiff", "png", "bmp", "pdf",
                           "aac", "mp3", "mp3pro", "vorbis", "realaudio", "vqf", "wma",
                           "aiff", "flac", "wav", "midi", "mka", "ogg", "jpeg", "ilbm", 
-                          "tar", "zip", "rar", "arj", "gzip", "bzip2", "afio", "kgb",
-                          "asf", "avi", "mov", "iff", "ogg", "ogm", "mkv", "3gp" );
+                          "tar", "zip", "rar", "arj", "gzip", "bzip2", "afio", "kgb", "gz",
+                          "asf", "avi", "mov", "iff", "ogg", "ogm", "mkv", "3gp",
+                          );
     $sFileName = strtolower($_SESSION['outpudocs_tmpFile']);
-    $sExtension = substr($sFileName, strpos($sFileName,'.') + 1, strlen($sFileName));
+    $strRev = strrev($sFileName);
+    $searchPos = strpos($strRev, '.');
+    $pos = (strlen($sFileName) - 1) - $searchPos;
+    $sExtension = substr($sFileName, $pos+1, strlen($sFileName));
     if(! in_array($sExtension, $aExtensions))
       echo $content = file_get_contents($_SESSION['outpudocs_tmpFile']);
   break;