From ac4808ad2144ef82a3ae5e70abebd589de5e9acb Mon Sep 17 00:00:00 2001 From: =?utf8?q?Tim=20D=C3=BCsterhus?= Date: Wed, 28 Apr 2021 10:48:33 +0200 Subject: [PATCH] Check whether the media file is readable in MediaImporter --- .../files/lib/system/importer/MediaImporter.class.php | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/wcfsetup/install/files/lib/system/importer/MediaImporter.class.php b/wcfsetup/install/files/lib/system/importer/MediaImporter.class.php index 1170d65d6a..04de79079e 100644 --- a/wcfsetup/install/files/lib/system/importer/MediaImporter.class.php +++ b/wcfsetup/install/files/lib/system/importer/MediaImporter.class.php @@ -14,7 +14,7 @@ use wcf\system\WCF; * Imports cms media. * * @author Marcel Werk - * @copyright 2001-2019 WoltLab GmbH + * @copyright 2001-2021 WoltLab GmbH * @license GNU Lesser General Public License * @package WoltLabSuite\Core\System\Importer */ @@ -35,6 +35,11 @@ class MediaImporter extends AbstractImporter */ public function import($oldID, array $data, array $additionalData = []) { + // check file location + if (!\is_readable($additionalData['fileLocation'])) { + return 0; + } + $data['userID'] = ImportHandler::getInstance()->getNewID('com.woltlab.wcf.user', $data['userID']); $contents = []; -- 2.20.1