Commit b8e9caa21922301a60278d6dfac7ae763546d111

Authored by Edmar Moretti
1 parent 97da8f59

Correção na expressão regular que testa os nomes dos arquivos durante o upload

ferramentas/upload/upload.php
@@ -44,14 +44,14 @@ if (isset($_FILES['fileshp']['name'])) @@ -44,14 +44,14 @@ if (isset($_FILES['fileshp']['name']))
44 $dirmap = dirname($map_file); 44 $dirmap = dirname($map_file);
45 //verifica nomes 45 //verifica nomes
46 $statusNome = 1; 46 $statusNome = 1;
47 - if( (ereg('[^a-zA-Z0-9_\.]',$_FILES['fileshp']['name'])) || (!ereg('\.shp$',$_FILES['fileshp']['name'])) ) 47 + if( (ereg('[^a-zA-Z0-9áéíóúâôêãõ_\.\ \-]',$_FILES['fileshp']['name'])) || (!ereg('\.shp$',$_FILES['fileshp']['name'])) )
48 {$statusNome = 0;} 48 {$statusNome = 0;}
49 - if( (ereg('[^a-zA-Z0-9_\.]',$_FILES['fileshx']['name'])) || (!ereg('\.shx$',$_FILES['fileshx']['name'])) ) 49 + if( (ereg('[^a-zA-Z0-9áéíóúâôêãõ_\.\ \-]',$_FILES['fileshx']['name'])) || (!ereg('\.shx$',$_FILES['fileshx']['name'])) )
50 {$statusNome = 0;} 50 {$statusNome = 0;}
51 - if( (ereg('[^a-zA-Z0-9_\.]',$_FILES['filedbf']['name'])) || (!ereg('\.dbf$',$_FILES['filedbf']['name'])) ) 51 + if( (ereg('[^a-zA-Z0-9áéíóúâôêãõ_\.\ \-]',$_FILES['filedbf']['name'])) || (!ereg('\.dbf$',$_FILES['filedbf']['name'])) )
52 {$statusNome = 0;} 52 {$statusNome = 0;}
53 if($statusNome != 1) 53 if($statusNome != 1)
54 - {echo "Arquivos inválidos";exit;} 54 + {echo "Nome de arquivo inválido";exit;}
55 //sobe arquivo 55 //sobe arquivo
56 $Arquivo = $_FILES['fileshp']['tmp_name']; 56 $Arquivo = $_FILES['fileshp']['tmp_name'];
57 $status = move_uploaded_file($Arquivo,$dirmap."/".$_FILES['fileshp']['name']); 57 $status = move_uploaded_file($Arquivo,$dirmap."/".$_FILES['fileshp']['name']);
ferramentas/uploaddbf/upload.php
@@ -44,10 +44,10 @@ if (isset($_FILES['filedbf']['name'])) @@ -44,10 +44,10 @@ if (isset($_FILES['filedbf']['name']))
44 $dirmap = dirname($map_file); 44 $dirmap = dirname($map_file);
45 //verifica nomes 45 //verifica nomes
46 $statusNome = 1; 46 $statusNome = 1;
47 - if( (ereg('[^a-zA-Z0-9_\.]',$_FILES['filedbf']['name'])) || (!ereg('\.dbf$',$_FILES['filedbf']['name'])) ) 47 + if( (ereg('[^a-zA-Z0-9áéíóúâôêãõ_\.\ \-]',$_FILES['filedbf']['name'])) || (!ereg('\.dbf$',$_FILES['filedbf']['name'])) )
48 {$statusNome = 0;} 48 {$statusNome = 0;}
49 if($statusNome != 1) 49 if($statusNome != 1)
50 - {echo "Arquivos inválidos";exit;} 50 + {echo "Nome de arquivo inválido";exit;}
51 //sobe arquivo 51 //sobe arquivo
52 $Arquivo = $_FILES['filedbf']['tmp_name']; 52 $Arquivo = $_FILES['filedbf']['tmp_name'];
53 $status = move_uploaded_file($Arquivo,$dirmap."/".$_FILES['filedbf']['name']); 53 $status = move_uploaded_file($Arquivo,$dirmap."/".$_FILES['filedbf']['name']);