HOT FIX - уязвимость на аплоаде файлов

classes/Image.php

@@ -32,6 +32,7 @@ class Image
 	public static function createAllSizes($imgName, $noWatermark = false, $folder = '')
 	{
 		$sizes = App::getConfig('images');
+		$srcdir = App::getBasedir() . 'photos/' . $folder;
 		$uploaddir = App::getBasedir() . 'public/photos/' . $folder;
 		$watermarkDir = App::getBasedir() . 'watermarks/';
 
@@ -40,7 +41,7 @@ class Image
 			$watermark = $noWatermark ? '' : $watermark;
 
 			self::imgResize(
-					$uploaddir . $imgName, // Source - original image
+					$srcdir . $imgName, // Source - original image
 					$uploaddir . $dir . '/' . $imgName, // Destination
 					$size[0], // X
 					$size[1], // Y

controllers/ImagesController.php

@@ -49,7 +49,7 @@ class ImagesController extends Controller
 	{
 		if (isset($_FILES) && !empty($_FILES) && App::$user) {
 			$userId = App::$user->id;
-			$uploaddir = App::getBasedir() . 'public/photos/articles/';
+			$uploaddir = App::getBasedir() . 'photos/articles/';
 			$fileName = (string)$_FILES['photo']['name'];
 			$temp = pathinfo($fileName);
 			$extension = strtolower($temp['extension']);

controllers/JsonController.php

@@ -148,7 +148,7 @@ class JsonController extends Controller
 		$photos = $images = array();
 		if (empty($errors) && !App::$request['ajax'] && isset($_POST['id']) && (int) $_POST['id']) {
 			$id = (int) $_POST['id'];
-			$uploaddir = App::getBasedir().'public/photos/';
+			$uploaddir = App::getBasedir().'photos/';
 
 			if (isset($_FILES) && !empty($_FILES)) {
 				foreach ($_FILES['photos']['name'] as $key => $fileName) {