mirror of
https://github.com/getgrav/grav-plugin-admin.git
synced 2025-11-12 16:26:07 +01:00
Tightened checks when removing a media file, cleanup
This commit is contained in:
@@ -913,11 +913,11 @@ class AdminBaseController
|
||||
$uri = $this->grav['uri'];
|
||||
$blueprint = base64_decode($uri->param('blueprint'));
|
||||
$path = base64_decode($uri->param('path'));
|
||||
$filename = basename($this->post['filename'] ?? '');
|
||||
$proute = base64_decode($uri->param('proute'));
|
||||
$route = base64_decode($uri->param('proute'));
|
||||
$type = $uri->param('type');
|
||||
$field = $uri->param('field');
|
||||
|
||||
$filename = basename($this->post['filename'] ?? '');
|
||||
if ($filename === '') {
|
||||
$this->admin->json_response = [
|
||||
'status' => 'error',
|
||||
@@ -929,7 +929,7 @@ class AdminBaseController
|
||||
|
||||
// Get Blueprint
|
||||
if ($type === 'pages' || strpos($blueprint, 'pages/') === 0) {
|
||||
$page = $this->admin->page(true, $proute);
|
||||
$page = $this->admin->page(true, $route);
|
||||
if (!$page) {
|
||||
$this->admin->json_response = [
|
||||
'status' => 'error',
|
||||
@@ -1039,10 +1039,7 @@ class AdminBaseController
|
||||
}
|
||||
|
||||
if (null === $filename) {
|
||||
$filename = base64_decode($this->grav['uri']->param('route'));
|
||||
if (!$filename) {
|
||||
$filename = base64_decode($this->route);
|
||||
}
|
||||
throw new \RuntimeException('Admin task RemoveMedia has been disabled.');
|
||||
}
|
||||
|
||||
$file = File::instance($filename);
|
||||
|
||||
Reference in New Issue
Block a user