diff --git a/files/ajax/upload.php b/files/ajax/upload.php new file mode 100644 index 00000000000..b3facf96723 --- /dev/null +++ b/files/ajax/upload.php @@ -0,0 +1,32 @@ + "error", "data" => "Authentication error" )); + exit(); +} + +$fileName=$_FILES['file']['name']; +$source=$_FILES['file']['tmp_name']; +$dir = $_POST['dir']; +if(!empty($dir)) $dir .= '/'; +$target='/' . stripslashes($dir) . $fileName; +if(isset($_SESSION['username']) +and $_SESSION['username'] and strpos($dir,'..') === false){ + if(OC_FILESYSTEM::fromTmpFile($source,$target)){ + echo json_encode(array( "status" => "success")); + exit(); + } +} + +echo json_encode(array( "status" => "error")); + +?>