From b2256e0d8f0379fb5e82e15fe015737a1b98aa51 Mon Sep 17 00:00:00 2001
From: rurban <rurban@96ab9672-09ca-45d6-a79d-3d69d39ca109>
Date: Wed, 11 Apr 2007 17:49:01 +0000
Subject: [PATCH] Chgeck against .php\d, i.e. php3

git-svn-id: svn://svn.code.sf.net/p/phpwiki/code/trunk@5658 96ab9672-09ca-45d6-a79d-3d69d39ca109
---
 lib/plugin/UpLoad.php | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/lib/plugin/UpLoad.php b/lib/plugin/UpLoad.php
index 3398b1dc9..3bcf5ff76 100644
--- a/lib/plugin/UpLoad.php
+++ b/lib/plugin/UpLoad.php
@@ -1,5 +1,5 @@
 <?php // -*-php-*-
-rcs_id('$Id: UpLoad.php,v 1.23 2007-04-08 12:43:45 rurban Exp $');
+rcs_id('$Id: UpLoad.php,v 1.24 2007-04-11 17:49:01 rurban Exp $');
 /*
  Copyright 2003,2004,2007 $ThePhpWikiProgrammingTeam
 
@@ -82,7 +82,7 @@ ocx
 ops
 pcd
 p[ir]f
-php
+php\d?
 pl
 py
 reg
@@ -239,6 +239,10 @@ ws[cfh]");
 }
 
 // $Log: not supported by cvs2svn $
+// Revision 1.23  2007/04/08 12:43:45  rurban
+// Important security fix!
+// Disallow files like "deface.php.3" also. Those are actually in the wild!
+//
 // Revision 1.22  2007/02/17 14:16:56  rurban
 // allow spaces in filenames
 //
-- 
2.45.0