diff --git a/classes/Admin.php b/classes/Admin.php index 29f8711..d9a5180 100644 --- a/classes/Admin.php +++ b/classes/Admin.php @@ -884,7 +884,7 @@ public static function ProcessWidgetUpload() { // if category is set in widget options, force to use this. security done with nonce checking ($_POST['cat'] is reliable) if ($_POST['cat'] >= 0) $_POST['file_category'] = $_POST['cat']; - $result = WPFB_Admin::InsertFile(stripslashes_deep(array_merge($_POST, $_FILES, array('frontend_upload' => true, 'form' => empty($form) ? null : $form)))); + $result = WPFB_Admin::InsertFile(array_merge($_FILES, stripslashes_deep(array_merge($_POST, array('frontend_upload' => true, 'form' => empty($form) ? null : $form))))); if (isset($result['error']) && $result['error']) { $content .= '

' . $result['error'] . '

'; $title .= __('Error'); diff --git a/classes/AdminGuiFiles.php b/classes/AdminGuiFiles.php index af8f99e..9df9033 100644 --- a/classes/AdminGuiFiles.php +++ b/classes/AdminGuiFiles.php @@ -79,7 +79,7 @@ static function Display() $_POST['file_date'] = sprintf( "%04d-%02d-%02d %02d:%02d:%02d", $aa, $mm, $jj, $hh, $mn, $ss ); } - $result = WPFB_Admin::InsertFile(stripslashes_deep(array_merge($_POST, $_FILES)), true); + $result = WPFB_Admin::InsertFile(array_merge(stripslashes_deep($_POST), $_FILES), true); if(isset($result['error']) && $result['error']) { $message = $result['error'] . '
' . __("Go back") . ''; } else { diff --git a/screens/editor-plugin.php b/screens/editor-plugin.php index b60696b..381188a 100644 --- a/screens/editor-plugin.php +++ b/screens/editor-plugin.php @@ -268,7 +268,7 @@ function insBrowserTag() if(!wp_verify_nonce($_POST['wpfb-file-nonce'], $nonce_action."-editor") && !wp_verify_nonce($_POST['wpfb-file-nonce'], $nonce_action) ) wp_die(__('Cheatin’ uh?')); - $result = WPFB_Admin::InsertFile(stripslashes_deep(array_merge($_POST, $_FILES))); + $result = WPFB_Admin::InsertFile(array_merge(stripslashes_deep($_POST), $_FILES)); if(isset($result['error']) && $result['error']) { ?>

- \ No newline at end of file +