X-Git-Url: http://git.cyclocoop.org/?p=ptitvelo%2Fweb%2Fwww.git;a=blobdiff_plain;f=www%2Fplugins-dist%2Fsvp%2Fformulaires%2Fcharger_plugin_archive.php;h=57c05ea3b77f97e0f73c205179f09022bbb36c48;hp=93d0f324316b7c63a4e5420b8dac1b31f143b72a;hb=e847eea4a82a7396dd0abf860f9b30d654f38629;hpb=d686c3e22e97dd46ef42bcd0f138c65083f8f232

diff --git a/www/plugins-dist/svp/formulaires/charger_plugin_archive.php b/www/plugins-dist/svp/formulaires/charger_plugin_archive.php
index 93d0f32..57c05ea 100644
--- a/www/plugins-dist/svp/formulaires/charger_plugin_archive.php
+++ b/www/plugins-dist/svp/formulaires/charger_plugin_archive.php
@@ -38,23 +38,29 @@ function formulaires_charger_plugin_archive_verifier_dist(){
 	if (!$archive = _request('archive')) {
 		$erreurs['archive'] = _T('info_obligatoire');
 	} else {
-		// calcul du répertoire de destination
-		if (!$destination = _request('destination')) {
-			$destination = pathinfo($archive);
-			$destination = $destination['filename'];
+		// Validité de l'url de l'archive
+		$infos_archive = pathinfo($archive);
+		if (!isset($infos_archive['extension'])) {
+			$erreurs['archive'] = _T('svp:message_nok_url_archive');
 		}
-		$destination = str_replace('../', '', $destination);
-		set_request('destination', $destination);
+		else {
+			// calcul du répertoire de destination
+			if (!$destination = _request('destination')) {
+				$destination = $infos_archive['filename'];
+			}
+			$destination = str_replace('../', '', $destination);
+			set_request('destination', $destination);
 
-		// si la destination existe, on demande confirmation de l'ecrasement.
-		$dir = _DIR_PLUGINS_AUTO . $destination;
-		if (is_dir($dir) and !_request('confirmer')) {
-			$base = dirname($dir);
-			$nom = basename($dir);
-			$backup = "$base/.$nom.bck";
-			$erreurs['confirmer'] = _T("svp:confirmer_telecharger_dans", array(
-				'dir' => joli_repertoire($dir),
-				'dir_backup' => joli_repertoire($backup)));
+			// si la destination existe, on demande confirmation de l'ecrasement.
+			$dir = _DIR_PLUGINS_AUTO . $destination;
+			if (is_dir($dir) and !_request('confirmer')) {
+				$base = dirname($dir);
+				$nom = basename($dir);
+				$backup = "$base/.$nom.bck";
+				$erreurs['confirmer'] = _T("svp:confirmer_telecharger_dans", array(
+					'dir' => joli_repertoire($dir),
+					'dir_backup' => joli_repertoire($backup)));
+			}
 		}
 	}