Apply proper sanitization to upload filenames

codesnippetspro · May 13, 2022 · 32dea96 · 32dea96
1 parent cff34c6
commit 32dea96
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/php/admin-menus/class-import-menu.php b/php/admin-menus/class-import-menu.php
@@ -58,8 +58,8 @@ private function process_import_files() {
 		$network = is_network_admin();
 		$error = false;
 
-		$upload_files = array_map( 'sanitize_file_name', $_FILES['code_snippets_import_files']['tmp_name'] );
-		$upload_filenames = array_map( 'sanitize_file_name', $_FILES['code_snippets_import_files']['name'] );
+		$upload_files = array_map( 'sanitize_text_field', $_FILES['code_snippets_import_files']['tmp_name'] );
+		$upload_filenames = array_map( 'sanitize_text_field', $_FILES['code_snippets_import_files']['name'] );
 		$upload_mime_types = array_map( 'sanitize_mime_type', $_FILES['code_snippets_import_files']['type'] );
 
 		$dup_action = isset( $_POST['duplicate_action'] ) ? sanitize_key( $_POST['duplicate_action'] ) : 'ignore';