From 3cf2acac7c4cdf3c705573fe240bc98fc2ebf0a4 Mon Sep 17 00:00:00 2001 From: Rudolf Hangl Date: Wed, 20 Jan 2010 09:46:51 +0000 Subject: [PATCH] --- cis/private/lehre/abgabe_student_details.php | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/cis/private/lehre/abgabe_student_details.php b/cis/private/lehre/abgabe_student_details.php index 6b5b60af0..8b915a8bf 100644 --- a/cis/private/lehre/abgabe_student_details.php +++ b/cis/private/lehre/abgabe_student_details.php @@ -85,6 +85,7 @@ else } //$user='if06b172'; +//$user='ti06m114'; $user = get_uid(); if($uid=='-1' || $uid!=$user) { @@ -167,6 +168,13 @@ if($command=="update" && $error!=true) move_uploaded_file($_FILES['datei']['tmp_name'], PAABGABE_PATH.$paabgabe_id.'_'.$user.'.pdf'); if(file_exists(PAABGABE_PATH.$paabgabe_id.'_'.$user.'.pdf')) { + if(!stristr($uploadfile, '.php') && !stristr($uploadfile, '.cgi') && !stristr($uploadfile, '.pl')) + { + if(copy($_FILES[$file]['tmp_name'], $uploadfile)) + { + exec('chmod 644 "'.$uploadfile.'"'); + } + } $qry="UPDATE campus.tbl_paabgabe SET abgabedatum = now(), updatevon = '".$user."',