Ticket #7674: 7674.01.patch

src/bp-core/bp-core-attachments.php

@@ -265 +265 @@
         }
 
         // Make sure the file path is safe.
-        if ( 0 !== validate_file( $r['image'] ) ) {
+        if ( 1 === validate_file( $r['image'] ) ) {
                 return false;
         }
 
@@ -447 +447 @@
         $type_subdir = $r['object_dir'] . '/' . $r['item_id'] . '/' . $r['type'];
         $type_dir    = trailingslashit( $bp_attachments_uploads_dir['basedir'] ) . $type_subdir;
 
-        if ( 0 !== validate_file( $type_dir ) || ! is_dir( $type_dir ) ) {
+        if ( 1 === validate_file( $type_dir ) || ! is_dir( $type_dir ) ) {
                 return $attachment_data;
         }
 
@@ -1303 +1303 @@
         $cover_subdir = $object_data['dir'] . '/' . $bp_params['item_id'] . '/cover-image';
         $cover_dir    = trailingslashit( $bp_attachments_uploads_dir['basedir'] ) . $cover_subdir;
 
-        if ( 0 !== validate_file( $cover_dir ) || ! is_dir( $cover_dir ) ) {
+        if ( 1 === validate_file( $cover_dir ) || ! is_dir( $cover_dir ) ) {
                 // Upload error response.
                 bp_attachments_json_response( false, $is_html4, array(
                         'type'    => 'upload_error',