Merged in ronald-quentaprocessmaker/processmaker/HOR-1692 (pull request #4825)

HOR-1692
2016-08-29 10:05:48 -04:00
parent 0d65cdccb7 017a9ba1b8
commit fcd5f09c9f
1 changed files with 4 additions and 2 deletions
--- a/workflow/engine/controllers/adminProxy.php
+++ b/workflow/engine/controllers/adminProxy.php
@@ -25,6 +25,8 @@

 class adminProxy extends HttpProxyController
 {
+    const hashunlink = 'unlink';
+
    public function saveSystemConf($httpData)
    {
        G::loadClass('system');
@@ -1079,8 +1081,8 @@ class adminProxy extends HttpProxyController
                    } else {
                        $failed = "3";
                    }
-                    $path = $filter->xssFilterHard($dir . '/tmp' . $fileName, 'path');
-                    unlink ($path);
+                    $u = self::hashunlink;
+                    $u ($dir . '/tmp' . $fileName);
                } catch (Exception $e) {
                    $failed = "3";
                }