function valid_file_name($fs)
{
    if (isStr($fs)) {
        return preg_match('/[\\/:*?"<>|]/', $fs) ? preg_replace('/[\\/:*?"<>|]/', '_', $fs) : $fs;
    }
    if (isDrw($fs)) {
        $d = array();
        foreach ($fs as $v) {
            $d[] = valid_file_name($v);
        }
        return $d;
    }
}
Example #2
0
         $res2 = sql_query("SELECT * FROM secondicons WHERE id=" . sqlesc($id) . " LIMIT 1");
         if ($row2 = mysql_fetch_array($res)) {
             $Cache->delete_value('secondicon_' . $row2['source'] . '_' . $row2['medium'] . '_' . $row2['codec'] . '_' . $row2['standard'] . '_' . $row2['processing'] . '_' . $row2['team'] . '_' . $row2['audiocodec'] . '_content');
         }
     }
     $Cache->delete_value('secondicon_' . $source . '_' . $medium . '_' . $codec . '_' . $standard . '_' . $processing . '_' . $team . '_' . $audiocodec . '_content');
 } elseif ($type == 'category') {
     $name = $_POST['name'];
     $image = trim($_POST['image']);
     $mode = 0 + $_POST['mode'];
     $class_name = trim($_POST['class_name']);
     $sort_index = 0 + $_POST['sort_index'];
     if (!$name || !$image) {
         stderr($lang_catmanage['std_error'], $lang_catmanage['std_missing_form_data']);
     }
     if (!valid_file_name($image)) {
         stderr($lang_catmanage['std_error'], $lang_catmanage['std_invalid_character_in_filename'] . htmlspecialchars($image));
     }
     if ($class_name && !valid_class_name($class_name)) {
         stderr($lang_catmanage['std_error'], $lang_catmanage['std_invalid_character_in_filename'] . htmlspecialchars($class_name));
     }
     if (!$mode) {
         stderr($lang_catmanage['std_error'], $lang_catmanage['std_invalid_mode_id']);
     }
     $updateset[] = "name=" . sqlesc($name);
     $updateset[] = "image=" . sqlesc($image);
     $updateset[] = "mode=" . sqlesc($mode);
     $updateset[] = "class_name=" . sqlesc($class_name);
     $updateset[] = "sort_index=" . sqlesc($sort_index);
     if ($_POST['isedit']) {
         $Cache->delete_value('category_content');