diff --git a/http/upload.cgi b/http/upload.cgi index 0cadf0ad030c9ec0b5ed7ce20d4c47a3d56a0fab..bfb435fcc59a1aec72631c320171d4e81d63572d 100755 --- a/http/upload.cgi +++ b/http/upload.cgi @@ -57,31 +57,32 @@ $filename = $string . "." . $extension; my $allowed_extension = 1; foreach(@not_allowed_extensions) - { +{ if($filename =~ /\.$_$/i) - { - $allowed_extension = 0; - last; - } + { + $allowed_extension = 0; + last; + } - } +} if($allowed_extension) - { - -open(FILE,">$upload_dir/$filename"); -binmode(FILE); - -while(<$upload_filehandle>) { - print FILE; -} -close FILE; + open(FILE,">$upload_dir/$filename"); + binmode(FILE); -print $ENV{HTTP_REFERER} . "$upload_dir$filename"; + while(<$upload_filehandle>) + { + print FILE; + } + + close FILE; + + print $ENV{HTTP_REFERER} . "$upload_dir$filename"; } -else { - print "The file extension .$extension is not allowed in this instance."; +else +{ + print "The file extension .$extension is not allowed in this instance."; }