$res .= "<imgurl>" .
($feature->imgpath ?
- full_url_from_filename ($feature->imgpath)
+ full_url_from_imgpath ($feature->imgpath)
: "") .
"</imgurl>";
server_error ();
}
}
- return basename($dest);
+ return basename_safe ($dest);
}
function img_check_upload ($file) {
}
function delete_image_if_unused ($imgpath, $con) {
+ if (!isset ($imgpath) || (strlen ($imgpath) == 0)) {
+ return;
+ }
if ($con->imgpath_exists ($imgpath)) {
return false;
}
while ($counter < 1000) {
if (!file_exists ($filename) &&
- !($con->imgpath_exists (basename ($filename)))) {
+ !($con->imgpath_exists (basename_safe ($filename)))) {
return $filename;
} else {
$counter++;
$description = unquote ($_POST ["description"]);
try {
- $new_feature = new feature ($id, $lon, $lat, $imgpath, $title, $description);
+ $new_feature = new feature ($id, $lon, $lat, $imgpath, $title, $description, 0);
} catch (Exception $e) {
request_error ();
}
$title = unquote ($_POST ["title"]);
$description = unquote ($_POST ["description"]);
try {
- $feature = new feature (null, $lon, $lat, $imgpath, $title, $description);
+ $feature = new feature (null, $lon, $lat, $imgpath, $title, $description, 0);
} catch (Exception $e) {
request_error ();
}