Vergleich inc/functions_upload.php - 1.01 - 1.02

  Keine Änderungen   Hinzugefügt   Modifiziert   Entfernt
Zeile 134Zeile 134
	global $db, $theme, $templates, $posthash, $pid, $tid, $forum, $mybb, $lang;
	
	$posthash = addslashes($mybb->input['posthash']);

 
	global $db, $theme, $templates, $posthash, $pid, $tid, $forum, $mybb, $lang;
	
	$posthash = addslashes($mybb->input['posthash']);

 
	$attachment['name'] = addslashes($attachment['name']);


	if(!is_uploaded_file($attachment['tmp_name']))
	{


	if(!is_uploaded_file($attachment['tmp_name']))
	{

Zeile 171Zeile 172
	}

	// Check if an attachment with this name is already in the post

 
	}

	// Check if an attachment with this name is already in the post

	$query = $db->query("SELECT * FROM ".TABLE_PREFIX."attachments WHERE filename='".addslashes($attachment['name'])."' AND (posthash='$posthash' OR (pid='$pid' AND pid!='0'))");

	$query = $db->query("SELECT * FROM ".TABLE_PREFIX."attachments WHERE filename='".$attachment['name']."' AND (posthash='$posthash' OR (pid='$pid' AND pid!='0'))");

	$prevattach = $db->fetch_array($query);
	if($prevattach['aid'])
	{

	$prevattach = $db->fetch_array($query);
	if($prevattach['aid'])
	{