Download as
Browse Code »

Commit 354c4a69aa081adf01598455e8db2439f6917011

Authored by Edmar Moretti
1 parent 55dd3ca5
Exists in master and in 7 other branches composer, doc-root, docker, guia, licenca, readme, unmaintened

--no commit message

Showing 3 changed files with 45 additions and 17 deletions   Show diff stats
ferramentas/carregamapa/upload.php
  Diff comments   View file @354c4a6
... ... @@ -25,11 +25,14 @@ if (isset($_FILES['i3GEOcarregamapafilemap']['name']))
25 25 echo "<p class='paragrafo' >Carregando o arquivo...</p>";
26 26 $dirmap = $dir_tmp;
27 27 $Arquivo = $_FILES['i3GEOcarregamapafilemap']['name'];
  28 + verificaNome($Arquivo);
  29 + /*
28 30 $statusNome = 1;
29 31 if( (ereg('[^a-zA-Z0-9\.]',$Arquivo)) || (!ereg('\.map$',$Arquivo)) )
30 32 {$statusNome = 0;}
31 33 if($statusNome != 1)
32 34 {echo "<p class='paragrafo' >Arquivo inválido.!";paraAguarde();exit;}
  35 + */
33 36 $nome = basename($Arquivo);
34 37 $arqtemp = $dirmap."/".$Arquivo;
35 38 $status = move_uploaded_file($_FILES['i3GEOcarregamapafilemap']['tmp_name'],$dirmap."/".$Arquivo);
... ... @@ -80,6 +83,18 @@ paraAguarde();
80 83 function paraAguarde(){
81 84 echo "<script>window.parent.i3GEOF.carregaMapa.aguarde.visibility='hidden';</script>";
82 85 }
  86 +function verificaNome($nome)
  87 +{
  88 + $nome = strtolower($nome);
  89 + $lista = explode(".",$nome);
  90 + $extensao = $lista[count($lista) - 1];
  91 + if($extensao != "map")
  92 + {
  93 + echo "Nome de arquivo inválido";
  94 + paraAguarde();
  95 + exit;
  96 + }
  97 +}
83 98 ?>
84 99 </body>
85 100 </html>
86 101 \ No newline at end of file
... ...
ferramentas/upload/upload.php
  Diff comments   View file @354c4a6
... ... @@ -27,15 +27,10 @@ if (isset($_FILES[&#39;i3GEOuploadshp&#39;][&#39;name&#39;]))
27 27 echo "<p class='paragrafo' >Carregando o arquivo...</p>";
28 28 $dirmap = dirname($map_file);
29 29 //verifica nomes
30   - $statusNome = 1;
31   - if( (ereg('[^a-zA-Z0-9áéíóúâôêãõ_\.\ \-]',$_FILES['i3GEOuploadshp']['name'])) || (!ereg('\.shp$',$_FILES['i3GEOuploadshp']['name'])) )
32   - {$statusNome = 0;}
33   - if( (ereg('[^a-zA-Z0-9áéíóúâôêãõ_\.\ \-]',$_FILES['i3GEOuploadshx']['name'])) || (!ereg('\.shx$',$_FILES['i3GEOuploadshx']['name'])) )
34   - {$statusNome = 0;}
35   - if( (ereg('[^a-zA-Z0-9áéíóúâôêãõ_\.\ \-]',$_FILES['i3GEOuploaddbf']['name'])) || (!ereg('\.dbf$',$_FILES['i3GEOuploaddbf']['name'])) )
36   - {$statusNome = 0;}
37   - if($statusNome != 1)
38   - {echo "<p class='paragrafo' >Nome de arquivo inválido. Evite acentos, espaços em branco ou caracteres especiais.";paraAguarde();exit;}
  30 + verificaNome($_FILES['i3GEOuploadshp']['name']);
  31 + verificaNome($_FILES['i3GEOuploadshx']['name']);
  32 + verificaNome($_FILES['i3GEOuploaddbf']['name']);
  33 +
39 34 //sobe arquivo
40 35 $Arquivo = $_FILES['i3GEOuploadshp']['tmp_name'];
41 36 $status = move_uploaded_file($Arquivo,$dirmap."/".$_FILES['i3GEOuploadshp']['name']);
... ... @@ -104,6 +99,18 @@ paraAguarde();
104 99 function paraAguarde(){
105 100 echo "<script>window.parent.i3GEOF.upload.aguarde.visibility='hidden';</script>";
106 101 }
  102 +function verificaNome($nome)
  103 +{
  104 + $nome = strtolower($nome);
  105 + $lista = explode(".",$nome);
  106 + $extensao = $lista[count($lista) - 1];
  107 + if(($extensao != "dbf") && ($extensao != "shx") && ($extensao != "shp"))
  108 + {
  109 + echo "Nome de arquivo inválido.";
  110 + paraAguarde();
  111 + exit;
  112 + }
  113 +}
107 114 ?>
108 115 </body>
109 116 </html>
110 117 \ No newline at end of file
... ...
ferramentas/uploaddbf/upload.php
  Diff comments   View file @354c4a6
... ... @@ -2,7 +2,6 @@
2 2 require_once("../../classesphp/pega_variaveis.php");
3 3 require_once("../../classesphp/funcoes_gerais.php");
4 4 include_once ("../../classesphp/carrega_ext.php");
5   -error_reporting(E_ALL);
6 5 session_name("i3GeoPHP");
7 6 if (isset($g_sid))
8 7 {session_id($g_sid);}
... ... @@ -19,7 +18,6 @@ $postgis_mapa = $_SESSION[&quot;postgis_mapa&quot;];
19 18 <body name="ancora" bgcolor="white" style="background-color:white;text-align:left;">
20 19 <p>
21 20 <?php
22   -//var_dump($_FILES);exit;
23 21 if (isset($_FILES['i3GEOuploaddbffile']['name']))
24 22 {
25 23 //$ndir = dirname($filen);
... ... @@ -28,16 +26,12 @@ if (isset($_FILES[&#39;i3GEOuploaddbffile&#39;][&#39;name&#39;]))
28 26 echo "<p>Carregando o arquivo...</p>";
29 27 $dirmap = dirname($map_file);
30 28 //verifica nomes
31   - $statusNome = 1;
32   - if( (ereg('[^a-zA-Z0-9áéíóúâôêãõ_\.\ \-]',$_FILES['filedbf']['name'])) || (!ereg('\.dbf$',$_FILES['filedbf']['name'])) || (!ereg('\.csv$',$_FILES['filedbf']['name'])))
33   - {$statusNome = 0;}
34   - if($statusNome != 1)
35   - {echo "Nome de arquivo inválido";exit;}
  29 + verificaNome($_FILES['i3GEOuploaddbffile']['name']);
36 30 //sobe arquivo
37 31 $Arquivo = $_FILES['i3GEOuploaddbffile']['tmp_name'];
38 32 $status = move_uploaded_file($Arquivo,$dirmap."/".$_FILES['i3GEOuploaddbffile']['name']);
39 33 if($status != 1)
40   - {echo "Ocorreu um erro no envio do arquivo";exit;}
  34 + {echo "Ocorreu um erro no envio do arquivo";paraAguarde();exit;}
41 35 $nome = explode(".",$_FILES['i3GEOuploaddbffile']['name']);
42 36 $nome = $nome[0];
43 37 $nomeshp = $dirmap."/".$nome.".shp";
... ... @@ -163,6 +157,18 @@ paraAguarde();
163 157 function paraAguarde(){
164 158 echo "<script>window.parent.i3GEOF.uploaddbf.aguarde.visibility='hidden';</script>";
165 159 }
  160 +function verificaNome($nome)
  161 +{
  162 + $nome = strtolower($nome);
  163 + $lista = explode(".",$nome);
  164 + $extensao = $lista[count($lista) - 1];
  165 + if(($extensao != "dbf") && ($extensao != "csv"))
  166 + {
  167 + echo "Nome de arquivo inválido";
  168 + paraAguarde();
  169 + exit;
  170 + }
  171 +}
166 172 ?>
167 173 </body>
168 174 </html>
169 175 \ No newline at end of file
... ...