Commit 135624ea authored by Frank Bergmann's avatar Frank Bergmann

- Improving security by added -limit_to xxx to all im_opt_val calls

parent da1764b8
......@@ -33,7 +33,7 @@ set user_id [im_rest_cookie_auth_user_id]
set package_id [db_string package "select min(package_id) from apm_packages where package_key = 'file-storage'"]
set mime_type [cr_filename_to_mime_type -create -- $upload_file]
set folder_id [im_fs_content_folder_for_object -object_id $ticket_id]
ns_log Notice "file-add: user_id=$user_id, ticket_id=$ticket_id, mime_type=$mime_type, folder_id=$folder_id, upload_file=[im_opt_val upload_file], title=$title, upload_file.tmpfile=${upload_file.tmpfile}"
ns_log Notice "file-add: user_id=$user_id, ticket_id=$ticket_id, mime_type=$mime_type, folder_id=$folder_id, title=$title, upload_file.tmpfile=${upload_file.tmpfile}"
set permission_p [permission::permission_p \
-object_id $folder_id \
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment