diff --git a/bureau/class/m_bro.php b/bureau/class/m_bro.php index 18d1e9d7..f6117fed 100644 --- a/bureau/class/m_bro.php +++ b/bureau/class/m_bro.php @@ -512,11 +512,16 @@ class m_bro { if (!strpos($_FILES['userfile']['name'],"/")) { if (is_uploaded_file($_FILES['userfile']['tmp_name'])) { if (!file_exists($absolute."/".$_FILES['userfile']['name'])) { - touch($absolute."/".$_FILES['userfile']['name']); + @touch($absolute."/".$_FILES['userfile']['name']); } - move_uploaded_file($_FILES['userfile']['tmp_name'], $absolute."/".$_FILES['userfile']['name']); + if (@move_uploaded_file($_FILES['userfile']['tmp_name'], $absolute."/".$_FILES['userfile']['name'])) { + return $absolute."/".$_FILES['userfile']['name']; + } else { + $err->raise("bro",3); + return false; + } } else { - $err->log("bro","uploadfile","Tentative d'attaque : ".$_FILES['userfile']['tmp_name']); + $err->log("bro","uploadfile","Tentative d'attaque : ".$_FILES['userfile']['tmp_name']); return false; } } diff --git a/bureau/locales/en_US/LC_MESSAGES/manual.po b/bureau/locales/en_US/LC_MESSAGES/manual.po index c0d5c64b..c1d45155 100644 --- a/bureau/locales/en_US/LC_MESSAGES/manual.po +++ b/bureau/locales/en_US/LC_MESSAGES/manual.po @@ -681,6 +681,9 @@ msgstr "File or folder name is incorrect" msgid "err_bro_2" msgstr "You cannot move or copy a file to the same folder" +msgid "err_bro_3" +msgstr "You don't have the right to write into this folder. Please check the access rights." + #. If we manage your DNS
You can manage your mails elsewhere if you want #. (MX field).
Write %s in this field if your mail #. must be managed by %s
or put the IP address or name of the mail server diff --git a/bureau/locales/fr_FR/LC_MESSAGES/manual.po b/bureau/locales/fr_FR/LC_MESSAGES/manual.po index bd947d83..b7147676 100644 --- a/bureau/locales/fr_FR/LC_MESSAGES/manual.po +++ b/bureau/locales/fr_FR/LC_MESSAGES/manual.po @@ -728,6 +728,10 @@ msgstr "R msgid "err_bro_2" msgstr "Vous ne pouvez pas déplacer un fichier dans le même répertoire !" +#. Right incorrect +msgid "err_bro_3" +msgstr "Vous n'avez pas le droit d'écrire dans ce répertoire. Vérifiez les droits d'accès !" + #. If we manage your DNS
You can manage your mails elsewhere if you want #. (MX field).
Write %s in this field if your mail #. must be managed by %s
or put the IP address or name of the mail server