Sanitize image file names to remove special characters; fix existing image paths

2025-11-11 18:10:26 +01:00
parent b1ce2ce3aa
commit e1cf2a3e46
4 changed files with 2 additions and 1 deletions
--- a/src/Controllers/ItemController.php
+++ b/src/Controllers/ItemController.php
@@ -159,7 +159,8 @@ class ItemController
        if (!is_dir($uploadDir)) {
            mkdir($uploadDir, 0755, true);
        }
-        $fileName = uniqid() . '_' . basename($file['name']);
+        $safeName = preg_replace('/[^a-zA-Z0-9_\-\.]/', '_', basename($file['name']));
+        $fileName = uniqid() . '_' . $safeName;
        $targetPath = $uploadDir . $fileName;
        error_log("Attempting to move from " . $file['tmp_name'] . " to " . $targetPath);
        if (move_uploaded_file($file['tmp_name'], $targetPath)) {