--- loncom/publisher/lonupload.pm 2006/07/05 22:23:09 1.33
+++ loncom/publisher/lonupload.pm 2007/05/02 01:34:23 1.35
@@ -2,7 +2,7 @@
# The LearningOnline Network with CAPA
# Handler to upload files into construction space
#
-# $Id: lonupload.pm,v 1.33 2006/07/05 22:23:09 albertel Exp $
+# $Id: lonupload.pm,v 1.35 2007/05/02 01:34:23 albertel Exp $
#
# Copyright Michigan State University Board of Trustees
#
@@ -41,6 +41,7 @@ use Apache::lonnet;
use HTML::Entities();
use Apache::lonlocal;
use Apache::lonnet;
+use LONCAPA();
my $DEBUG=0;
@@ -98,7 +99,7 @@ sub phaseone {
''.
''.&mt('Store uploaded file as ').
+ '" />'.&mt('Save uploaded file as ').
"/priv/$uname/".
'
'.
@@ -111,7 +112,7 @@ sub phaseone {
');
- $r->print('');
+ $r->print('');
# Check for bad extension and warn user
if ($fn=~/\.(\w+)$/ &&
(&Apache::loncommon::fileembstyle($1) eq 'hdn')) {
@@ -289,7 +290,7 @@ function verifyForm() {
$fn=$env{'form.filename'};
$fn=~s/^http\:\/\/[^\/]+\///;
$fn=~s/^\///;
- $fn=~s/(\~|priv\/)(\w+)//;
+ $fn=~s{(~|priv/)($LONCAPA::username_re)}{};
$fn=~s/\/+/\//g;
} else {
$r->log_reason($env{'user.name'}.' at '.$env{'user.domain'}.