Menu
▾
▴
#10 File upload naming bug
Reported by Sebastian C Skuse:
We've also identified an issue that is present in the development copy of InFolio (and in the live versions currently running) - uploading a video with spaces in the filename always fails. After digging into this a little deeper it seems that it's not being escaped, i.e. uploading a file called "Dec 12 16:30 - VID00064.avi" results in:
convert: no decode delegate for this image format `/var/www/dev/InStep/data/rix-asset/video/size_thumbnail/Dec' @ error/constitute.c/ReadImage/532.
(trying to find the handler for the filetype, but it finds the end of the string as Dec instead which, of course, has no handler).
This could be potentially very dangerous, as it seems the rest of the filename is being evaluated on the command line...
