.issues/a5d5a0aae0cb2468/new/1276151607.M152689P10154Q1.tomas
author Dmitriy Morozov <dmitriy@mrzv.org>
Thu, 28 Apr 2011 08:50:31 -0700
changeset 68 88c088722a30
parent 66 bf3b55a54cff
permissions -rw-r--r--
Fixed #a5d (use basename() on attachment filenames)

From: "Tomas Zeman <tzeman@volny.cz>"
Date: Thu, 10 Jun 2010 08:31:23 +0200
State: resolved
Subject: Attachments should be stored without path
Message-Id: <a5d5a0aae0cb2468-0-artemis@tomas>
resolution: fixed

Attachments are stored with their path causing attachment extract operation to
override the original file.

That can lead to disaster if e.g. one uses absolute path and file like
/etc/passwd etc.