makary/phpbb
1
0
Fork 0
mirror of https://github.com/phpbb/phpbb.git synced 2025-06-28 14:18:52 +00:00
Code Issues Projects Releases Packages Wiki Activity

[ticket/security/244] Add parse_attachment form token check to posting.php

Browse source 
SECURITY-244
This commit is contained in:
Marc Alexander 2019-07-01 20:56:17 +02:00
parent 56477a8f7c
commit 6c8d006336
No known key found for this signature in database
GPG key ID: 50E0D2423696F995
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
phpBB/posting.php
View file

@ -974,7 +974,10 @@ if ($submit || $preview || $refresh)
} }
// Parse Attachments - before checksum is calculated // Parse Attachments - before checksum is calculated
if ($message_parser->check_attachment_form_token($language, $request, 'posting'))
{
$message_parser->parse_attachments('fileupload', $mode, $forum_id, $submit, $preview, $refresh); $message_parser->parse_attachments('fileupload', $mode, $forum_id, $submit, $preview, $refresh);
}
/** /**
* This event allows you to modify message text before parsing * This event allows you to modify message text before parsing