$b->info('attempt to delete a file outside the root tricking the directory name');
touch($target_path . '/system-file.test');
try {
$b->get('/sf_media_browser/file_delete?file=' . urlencode($target_name . '/system-file.test'));
} catch (sfSecurityException $e) {
$t->pass($e->getMessage());
}
$t->ok(file_exists($target_path . '/system-file.test'), 'Files outside root still exists');
@unlink($target_path . '/system-file.test');
$b->info('attempt to delete the root itself');
try {
$b->get('/sf_media_browser/dir_delete?directory=' . urlencode(sfConfig::get('app_sf_media_browser_root_dir')))->with('response')->isStatusCode(500);
} catch (sfSecurityException $e) {
$t->pass($e->getMessage());
}
$b->existsOnDisk($root_path);
# RENAME
copy($fixture_file, $target_path . '/file_to_rename.jpg');
$b->info('attempt to rename a file outside the root');
try {
$b->post('sf_media_browser/rename', array('file' => $target_name . '/file_to_rename.jpg', 'name' => 'name_changed'));
} catch (sfSecurityException $e) {
$t->pass($e->getMessage());
}
$b->existsOnDisk($target_path . '/file_to_rename.jpg')->existsOnDisk($target_path . '/name_changed.jpg', false);
@unlink($target_path . '/file_to_rename.jpg');
@unlink($target_path . '/name_changed.jpg');
@mkdir($target_path . '/dir_to_rename');
$b->info('attempt to rename a folder outside the root');
try {
$b->post('sf_media_browser/rename', array('file' => $target_name . '/dir_to_rename', 'name' => 'dir_renamed'));
