Change in blnUploadSecurityCheck

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

Hello,
Is not it better to change in "function _upload.asp" within the NEXT chain "blnUploadSecurityCheck": 

       'If the disallowed HTML is found set the file as not being allowed
       If Instr(1, strTempFile,  saryUnSafeHTMLtags(lngLoopCounter), 1) Then
        'For testing purposes
        'Response.Write(" - " & saryUnSafeHTMLtags(lngLoopCounter))
        'Response.End

        'Set the security scan fail boolen to true
        blnSecurityScanFail = True
       End If

BY

       'If the disallowed HTML is found set the file as not being allowed
       If Instr(1, strTempFile,  saryUnSafeHTMLtags(lngLoopCounter), 1) Then
        'For testing purposes
        'Response.Write(" - " & saryUnSafeHTMLtags(lngLoopCounter))
        'Response.End

        strNewFileName = hexValue(7)
       End If

Thus if an image contains a text prohibited on their behalf upload the photo and renames. Eg. "embedding.jpg".

Sorry for my English. It is translated by Google Translate. I hope you understand.

Edited by Roberto Randall - 24 October 2016 at 8:54pm