<?xml version="1.0" encoding="UTF-8" standalone="yes" ?>
<!DOCTYPE bugzilla SYSTEM "http://pkp.sfu.ca/bugzilla/bugzilla.dtd">

<bugzilla version="4.2.5+"
          urlbase="http://pkp.sfu.ca/bugzilla/"
          
          maintainer="pkp-hosted@sfu.ca"
>

    <bug>
          <bug_id>6689</bug_id>
          
          <creation_ts>2011-06-16 09:26:00 -0700</creation_ts>
          <short_desc>Cover image upload does not check file type</short_desc>
          <delta_ts>2012-06-06 15:27:10 -0700</delta_ts>
          <reporter_accessible>1</reporter_accessible>
          <cclist_accessible>1</cclist_accessible>
          <classification_id>1</classification_id>
          <classification>Unclassified</classification>
          <product>OJS</product>
          <component>General</component>
          <version>2.3.6</version>
          <rep_platform>All</rep_platform>
          <op_sys>All</op_sys>
          <bug_status>RESOLVED</bug_status>
          <resolution>FIXED</resolution>
          
          
          <bug_file_loc></bug_file_loc>
          <status_whiteboard></status_whiteboard>
          <keywords></keywords>
          <priority>P3</priority>
          <bug_severity>normal</bug_severity>
          <target_milestone>---</target_milestone>
          
          
          <everconfirmed>1</everconfirmed>
          <reporter name="Alec Smecher">alec</reporter>
          <assigned_to name="PKP Support">pkp-support</assigned_to>
          <cc>ales.kladnik</cc>
    
    <cc>colin.prince</cc>
    
    <cc>jfitz049</cc>
    
    <cc>plotti</cc>
          <cf_reportedversion>2.3.5</cf_reportedversion>
          <cf_alsoaffects>OJS 2.2.5</cf_alsoaffects>
    
    <cf_alsoaffects>OJS 2.3.2</cf_alsoaffects>
    
    <cf_alsoaffects>OJS 2.3.3</cf_alsoaffects>
    
    <cf_alsoaffects>OJS 2.3.4</cf_alsoaffects>
    
    <cf_alsoaffects>OJS 2.3.5</cf_alsoaffects>

      

      

      

          <long_desc isprivate="0">
            <commentid>24037</commentid>
            <who name="Alec Smecher">alec</who>
            <bug_when>2011-06-16 09:26:56 -0700</bug_when>
            <thetext>Cover image upload does not check file type. It should ensure file types in the usual set (.jpg, .gif, .png).</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <commentid>24039</commentid>
              <attachid>3565</attachid>
            <who name="Alec Smecher">alec</who>
            <bug_when>2011-06-16 10:06:52 -0700</bug_when>
            <thetext>Created attachment 3565
Patch against OJS 2.3.0, 2.3.1, 2.3.2</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <commentid>24040</commentid>
              <attachid>3566</attachid>
            <who name="Alec Smecher">alec</who>
            <bug_when>2011-06-16 10:07:13 -0700</bug_when>
            <thetext>Created attachment 3566
Patch against OJS 2.3.3, 2.3.4, 2.3.5</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <commentid>24041</commentid>
              <attachid>3567</attachid>
            <who name="Alec Smecher">alec</who>
            <bug_when>2011-06-16 10:12:46 -0700</bug_when>
            <thetext>Created attachment 3567
Patch against OJS 2.2.1, 2.2.2, 2.2.3, 2.2.4</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <commentid>24048</commentid>
            <who name="jayfitzsimmons">jfitz049</who>
            <bug_when>2011-06-17 12:04:33 -0700</bug_when>
            <thetext>Could you also allow .pdf files as cover images?  We&apos;re planning on using pdf files for cover images for our journal.  Thanks.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <commentid>24049</commentid>
            <who name="Alec Smecher">alec</who>
            <bug_when>2011-06-17 12:48:31 -0700</bug_when>
            <thetext>jayfitzsimmons -- probably not something we&apos;d integrate into the codebase, but you can allow PDFs by modifying lib/pkp/classes/file/FileManager.inc.php in the getImageExtension function and adding a PDF entry. You&apos;d also have to modify the template that displays these (templates/issue/issue.tpl) as the usual &lt;img ...&gt; tag won&apos;t work with PDFs.</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <commentid>24050</commentid>
            <who name="jayfitzsimmons">jfitz049</who>
            <bug_when>2011-06-17 13:18:48 -0700</bug_when>
            <thetext>Ok - thank you Alec.
Jay</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <commentid>24061</commentid>
            <who name="Ales Kladnik">ales.kladnik</who>
            <bug_when>2011-06-20 03:00:12 -0700</bug_when>
            <thetext>I patched our OJS 2.3.4 installation with the appropriate patch (that fixes MetadataForm.inc.php file), but the form at /ojs/&lt;journal-name&gt;/editor/issueData/ still accepts other file types. I could upload for example a file named &quot;setup.exe&quot;, the image however was not showing, but I can see the file in the &quot;public&quot; directory, renamed as &quot;cover... .exe&quot;</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <commentid>24062</commentid>
            <who name="Alec Smecher">alec</who>
            <bug_when>2011-06-20 10:37:19 -0700</bug_when>
            <thetext>Ales, we&apos;re currently reviewing our file upload code to ensure that there aren&apos;t additional problems. Watch for an additional Bugzilla entry on our recommended patches page at http://pkp.sfu.ca/wiki/index.php/OJS_2.3.5_Recommended_Patches (we may or may not back-port fixes to prior versions, depending on severity).</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <commentid>24209</commentid>
            <who name="plotti">plotti</who>
            <bug_when>2011-06-30 02:18:03 -0700</bug_when>
            <thetext>We are running Open Journal Systems 2.1.1.0. Is there a patch provided for this version, or is it not affected?

Thanks a lot for your help.
Tom</thetext>
          </long_desc>
          <long_desc isprivate="0">
            <commentid>24210</commentid>
            <who name="Alec Smecher">alec</who>
            <bug_when>2011-06-30 08:24:31 -0700</bug_when>
            <thetext>Tom, OJS 2.2.0 and prior are not affected.</thetext>
          </long_desc>
      
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>3565</attachid>
            <date>2011-06-16 10:06:00 -0700</date>
            <delta_ts>2011-06-16 10:06:52 -0700</delta_ts>
            <desc>Patch against OJS 2.3.0, 2.3.1, 2.3.2</desc>
            <filename>6689-2.3.0.diff</filename>
            <type>text/plain</type>
            <size>2476</size>
            <attacher>alec</attacher>
            
              <data encoding="base64">ZGlmZiAtdSAtciAtTiBvanMtMi4zLjAvY2xhc3Nlcy9zdWJtaXNzaW9uL2Zvcm0vTWV0YWRhdGFG
b3JtLmluYy5waHAgb2pzLTIuMy4wLW1vZC9jbGFzc2VzL3N1Ym1pc3Npb24vZm9ybS9NZXRhZGF0
YUZvcm0uaW5jLnBocAotLS0gb2pzLTIuMy4wL2NsYXNzZXMvc3VibWlzc2lvbi9mb3JtL01ldGFk
YXRhRm9ybS5pbmMucGhwCTIwMDktMDktMTggMTM6MTk6MjEuMDAwMDAwMDAwIC0wNzAwCisrKyBv
anMtMi4zLjAtbW9kL2NsYXNzZXMvc3VibWlzc2lvbi9mb3JtL01ldGFkYXRhRm9ybS5pbmMucGhw
CTIwMTEtMDYtMTYgMTA6MDI6MzQuMDAwMDAwMDAwIC0wNzAwCkBAIC0xNyw2ICsxNyw4IEBACiAK
IGltcG9ydCgnZm9ybS5Gb3JtJyk7CiAKK2RlZmluZSgnQ09WRVJfUEFHRV9JTUFHRV9OQU1FJywg
J2NvdmVyUGFnZScpOworCiBjbGFzcyBNZXRhZGF0YUZvcm0gZXh0ZW5kcyBGb3JtIHsKIAkvKiog
QHZhciBBcnRpY2xlIGN1cnJlbnQgYXJ0aWNsZSAqLwogCXZhciAkYXJ0aWNsZTsKQEAgLTIzOCw2
ICsyNDAsMjggQEAKIAl9CiAKIAkvKioKKwkgKiBDaGVjayB0byBlbnN1cmUgdGhhdCB0aGUgZm9y
bSBpcyBjb3JyZWN0bHkgdmFsaWRhdGVkLgorCSAqLworCWZ1bmN0aW9uIHZhbGlkYXRlKCkgewor
CQkvLyBWZXJpZnkgdGhhdCBhbiBpbWFnZSBjb3ZlciwgaWYgc3VwcGxpZWQsIGlzIGFjdHVhbGx5
IGFuIGltYWdlLgorCQlpbXBvcnQoJ2NsYXNzZXMuZmlsZS5QdWJsaWNGaWxlTWFuYWdlcicpOwor
CQkkcHVibGljRmlsZU1hbmFnZXIgPSBuZXcgUHVibGljRmlsZU1hbmFnZXIoKTsKKwkJaWYgKCRw
dWJsaWNGaWxlTWFuYWdlci0+dXBsb2FkZWRGaWxlRXhpc3RzKENPVkVSX1BBR0VfSU1BR0VfTkFN
RSkpIHsKKwkJCSR0eXBlID0gJHB1YmxpY0ZpbGVNYW5hZ2VyLT5nZXRVcGxvYWRlZEZpbGVUeXBl
KENPVkVSX1BBR0VfSU1BR0VfTkFNRSk7CisJCQkkZXh0ZW5zaW9uID0gJHB1YmxpY0ZpbGVNYW5h
Z2VyLT5nZXRJbWFnZUV4dGVuc2lvbigkdHlwZSk7CisJCQlpZiAoISRleHRlbnNpb24pIHsKKwkJ
CQkvLyBOb3QgYSB2YWxpZCBpbWFnZS4KKwkJCQkkdGhpcy0+YWRkRXJyb3IoJ2ltYWdlRmlsZScs
IExvY2FsZTo6dHJhbnNsYXRlKCdzdWJtaXNzaW9uLmxheW91dC5pbWFnZUludmFsaWQnKSk7CisJ
CQkJcmV0dXJuIGZhbHNlOworCQkJfQorCQl9CisKKwkJLy8gRmFsbCBiYWNrIG9uIHBhcmVudCB2
YWxpZGF0aW9uCisJCXJldHVybiBwYXJlbnQ6OnZhbGlkYXRlKCk7CisJfQorCisKKwkvKioKIAkg
KiBTYXZlIGNoYW5nZXMgdG8gYXJ0aWNsZS4KIAkgKiBAcmV0dXJuIGludCB0aGUgYXJ0aWNsZSBJ
RAogCSAqLwpAQCAtMjU2LDExICsyODAsMTEgQEAKIAogCQlpbXBvcnQoJ2ZpbGUuUHVibGljRmls
ZU1hbmFnZXInKTsKIAkJJHB1YmxpY0ZpbGVNYW5hZ2VyID0gbmV3IFB1YmxpY0ZpbGVNYW5hZ2Vy
KCk7Ci0JCWlmICgkcHVibGljRmlsZU1hbmFnZXItPnVwbG9hZGVkRmlsZUV4aXN0cygnY292ZXJQ
YWdlJykpIHsKKwkJaWYgKCRwdWJsaWNGaWxlTWFuYWdlci0+dXBsb2FkZWRGaWxlRXhpc3RzKENP
VkVSX1BBR0VfSU1BR0VfTkFNRSkpIHsKIAkJCSRqb3VybmFsID0gUmVxdWVzdDo6Z2V0Sm91cm5h
bCgpOwotCQkJJG9yaWdpbmFsRmlsZU5hbWUgPSAkcHVibGljRmlsZU1hbmFnZXItPmdldFVwbG9h
ZGVkRmlsZU5hbWUoJ2NvdmVyUGFnZScpOwotCQkJJG5ld0ZpbGVOYW1lID0gJ2NvdmVyX2FydGlj
bGVfJyAuICR0aGlzLT5nZXREYXRhKCdhcnRpY2xlSWQnKSAuICdfJyAuICR0aGlzLT5nZXRGb3Jt
TG9jYWxlKCkgLiAnLicgLiAkcHVibGljRmlsZU1hbmFnZXItPmdldEV4dGVuc2lvbigkb3JpZ2lu
YWxGaWxlTmFtZSk7Ci0JCQkkcHVibGljRmlsZU1hbmFnZXItPnVwbG9hZEpvdXJuYWxGaWxlKCRq
b3VybmFsLT5nZXRKb3VybmFsSWQoKSwgJ2NvdmVyUGFnZScsICRuZXdGaWxlTmFtZSk7CisJCQkk
b3JpZ2luYWxGaWxlTmFtZSA9ICRwdWJsaWNGaWxlTWFuYWdlci0+Z2V0VXBsb2FkZWRGaWxlTmFt
ZShDT1ZFUl9QQUdFX0lNQUdFX05BTUUpOworCQkJJG5ld0ZpbGVOYW1lID0gJ2NvdmVyX2FydGlj
bGVfJyAuICR0aGlzLT5hcnRpY2xlLT5nZXRBcnRpY2xlSWQoKSAuICdfJyAuICR0aGlzLT5nZXRG
b3JtTG9jYWxlKCkgLiAnLicgLiAkcHVibGljRmlsZU1hbmFnZXItPmdldEV4dGVuc2lvbigkb3Jp
Z2luYWxGaWxlTmFtZSk7CisJCQkkcHVibGljRmlsZU1hbmFnZXItPnVwbG9hZEpvdXJuYWxGaWxl
KCRqb3VybmFsLT5nZXRKb3VybmFsSWQoKSwgQ09WRVJfUEFHRV9JTUFHRV9OQU1FLCAkbmV3Rmls
ZU5hbWUpOwogCQkJJGFydGljbGUtPnNldE9yaWdpbmFsRmlsZU5hbWUoJHB1YmxpY0ZpbGVNYW5h
Z2VyLT50cnVuY2F0ZUZpbGVOYW1lKCRvcmlnaW5hbEZpbGVOYW1lLCAxMjcpLCAkdGhpcy0+Z2V0
Rm9ybUxvY2FsZSgpKTsKIAkJCSRhcnRpY2xlLT5zZXRGaWxlTmFtZSgkbmV3RmlsZU5hbWUsICR0
aGlzLT5nZXRGb3JtTG9jYWxlKCkpOwogCg==
</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>3566</attachid>
            <date>2011-06-16 10:07:00 -0700</date>
            <delta_ts>2011-06-16 10:07:13 -0700</delta_ts>
            <desc>Patch against OJS 2.3.3, 2.3.4, 2.3.5</desc>
            <filename>6689.diff</filename>
            <type>text/plain</type>
            <size>2488</size>
            <attacher>alec</attacher>
            
              <data encoding="base64">ZGlmZiAtLWdpdCBhL2NsYXNzZXMvc3VibWlzc2lvbi9mb3JtL01ldGFkYXRhRm9ybS5pbmMucGhw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</data>

          </attachment>
          <attachment
              isobsolete="0"
              ispatch="1"
              isprivate="0"
          >
            <attachid>3567</attachid>
            <date>2011-06-16 10:12:00 -0700</date>
            <delta_ts>2011-06-16 10:12:46 -0700</delta_ts>
            <desc>Patch against OJS 2.2.1, 2.2.2, 2.2.3, 2.2.4</desc>
            <filename>6689-2.2.4.diff</filename>
            <type>text/plain</type>
            <size>2477</size>
            <attacher>alec</attacher>
            
              <data encoding="base64">ZGlmZiAtdSAtciAtTiBvanMtMi4yLjQvY2xhc3Nlcy9zdWJtaXNzaW9uL2Zvcm0vTWV0YWRhdGFG
b3JtLmluYy5waHAgb2pzLTIuMi40LW1vZC9jbGFzc2VzL3N1Ym1pc3Npb24vZm9ybS9NZXRhZGF0
YUZvcm0uaW5jLnBocAotLS0gb2pzLTIuMi40L2NsYXNzZXMvc3VibWlzc2lvbi9mb3JtL01ldGFk
YXRhRm9ybS5pbmMucGhwCTIwMDktMDQtMDggMTI6NDI6NTAuMDAwMDAwMDAwIC0wNzAwCisrKyBv
anMtMi4yLjQtbW9kL2NsYXNzZXMvc3VibWlzc2lvbi9mb3JtL01ldGFkYXRhRm9ybS5pbmMucGhw
CTIwMTEtMDYtMTYgMTA6MDk6MzkuMDAwMDAwMDAwIC0wNzAwCkBAIC0xNyw2ICsxNyw4IEBACiAK
IGltcG9ydCgnZm9ybS5Gb3JtJyk7CiAKK2RlZmluZSgnQ09WRVJfUEFHRV9JTUFHRV9OQU1FJywg
J2NvdmVyUGFnZScpOworCiBjbGFzcyBNZXRhZGF0YUZvcm0gZXh0ZW5kcyBGb3JtIHsKIAkvKiog
QHZhciBBcnRpY2xlIGN1cnJlbnQgYXJ0aWNsZSAqLwogCXZhciAkYXJ0aWNsZTsKQEAgLTIzNCw2
ICsyMzYsMjggQEAKIAl9CiAKIAkvKioKKwkgKiBDaGVjayB0byBlbnN1cmUgdGhhdCB0aGUgZm9y
bSBpcyBjb3JyZWN0bHkgdmFsaWRhdGVkLgorCSAqLworCWZ1bmN0aW9uIHZhbGlkYXRlKCkgewor
CQkvLyBWZXJpZnkgdGhhdCBhbiBpbWFnZSBjb3ZlciwgaWYgc3VwcGxpZWQsIGlzIGFjdHVhbGx5
IGFuIGltYWdlLgorCQlpbXBvcnQoJ2NsYXNzZXMuZmlsZS5QdWJsaWNGaWxlTWFuYWdlcicpOwor
CQkkcHVibGljRmlsZU1hbmFnZXIgPSBuZXcgUHVibGljRmlsZU1hbmFnZXIoKTsKKwkJaWYgKCRw
dWJsaWNGaWxlTWFuYWdlci0+dXBsb2FkZWRGaWxlRXhpc3RzKENPVkVSX1BBR0VfSU1BR0VfTkFN
RSkpIHsKKwkJCSR0eXBlID0gJHB1YmxpY0ZpbGVNYW5hZ2VyLT5nZXRVcGxvYWRlZEZpbGVUeXBl
KENPVkVSX1BBR0VfSU1BR0VfTkFNRSk7CisJCQkkZXh0ZW5zaW9uID0gJHB1YmxpY0ZpbGVNYW5h
Z2VyLT5nZXRJbWFnZUV4dGVuc2lvbigkdHlwZSk7CisJCQlpZiAoISRleHRlbnNpb24pIHsKKwkJ
CQkvLyBOb3QgYSB2YWxpZCBpbWFnZS4KKwkJCQkkdGhpcy0+YWRkRXJyb3IoJ2ltYWdlRmlsZScs
IExvY2FsZTo6dHJhbnNsYXRlKCdzdWJtaXNzaW9uLmxheW91dC5pbWFnZUludmFsaWQnKSk7CisJ
CQkJcmV0dXJuIGZhbHNlOworCQkJfQorCQl9CisKKwkJLy8gRmFsbCBiYWNrIG9uIHBhcmVudCB2
YWxpZGF0aW9uCisJCXJldHVybiBwYXJlbnQ6OnZhbGlkYXRlKCk7CisJfQorCisKKwkvKioKIAkg
KiBTYXZlIGNoYW5nZXMgdG8gYXJ0aWNsZS4KIAkgKiBAcmV0dXJuIGludCB0aGUgYXJ0aWNsZSBJ
RAogCSAqLwpAQCAtMjUyLDExICsyNzYsMTEgQEAKIAogCQlpbXBvcnQoJ2ZpbGUuUHVibGljRmls
ZU1hbmFnZXInKTsKIAkJJHB1YmxpY0ZpbGVNYW5hZ2VyID0mIG5ldyBQdWJsaWNGaWxlTWFuYWdl
cigpOwotCQlpZiAoJHB1YmxpY0ZpbGVNYW5hZ2VyLT51cGxvYWRlZEZpbGVFeGlzdHMoJ2NvdmVy
UGFnZScpKSB7CisJCWlmICgkcHVibGljRmlsZU1hbmFnZXItPnVwbG9hZGVkRmlsZUV4aXN0cyhD
T1ZFUl9QQUdFX0lNQUdFX05BTUUpKSB7CiAJCQkkam91cm5hbCA9IFJlcXVlc3Q6OmdldEpvdXJu
YWwoKTsKLQkJCSRvcmlnaW5hbEZpbGVOYW1lID0gJHB1YmxpY0ZpbGVNYW5hZ2VyLT5nZXRVcGxv
YWRlZEZpbGVOYW1lKCdjb3ZlclBhZ2UnKTsKLQkJCSRuZXdGaWxlTmFtZSA9ICdjb3Zlcl9hcnRp
Y2xlXycgLiAkdGhpcy0+Z2V0RGF0YSgnYXJ0aWNsZUlkJykgLiAnXycgLiAkdGhpcy0+Z2V0Rm9y
bUxvY2FsZSgpIC4gJy4nIC4gJHB1YmxpY0ZpbGVNYW5hZ2VyLT5nZXRFeHRlbnNpb24oJG9yaWdp
bmFsRmlsZU5hbWUpOwotCQkJJHB1YmxpY0ZpbGVNYW5hZ2VyLT51cGxvYWRKb3VybmFsRmlsZSgk
am91cm5hbC0+Z2V0Sm91cm5hbElkKCksICdjb3ZlclBhZ2UnLCAkbmV3RmlsZU5hbWUpOworCQkJ
JG9yaWdpbmFsRmlsZU5hbWUgPSAkcHVibGljRmlsZU1hbmFnZXItPmdldFVwbG9hZGVkRmlsZU5h
bWUoQ09WRVJfUEFHRV9JTUFHRV9OQU1FKTsKKwkJCSRuZXdGaWxlTmFtZSA9ICdjb3Zlcl9hcnRp
Y2xlXycgLiAkdGhpcy0+YXJ0aWNsZS0+Z2V0QXJ0aWNsZUlkKCkgLiAnXycgLiAkdGhpcy0+Z2V0
Rm9ybUxvY2FsZSgpIC4gJy4nIC4gJHB1YmxpY0ZpbGVNYW5hZ2VyLT5nZXRFeHRlbnNpb24oJG9y
aWdpbmFsRmlsZU5hbWUpOworCQkJJHB1YmxpY0ZpbGVNYW5hZ2VyLT51cGxvYWRKb3VybmFsRmls
ZSgkam91cm5hbC0+Z2V0Sm91cm5hbElkKCksIENPVkVSX1BBR0VfSU1BR0VfTkFNRSwgJG5ld0Zp
bGVOYW1lKTsKIAkJCSRhcnRpY2xlLT5zZXRPcmlnaW5hbEZpbGVOYW1lKCRwdWJsaWNGaWxlTWFu
YWdlci0+dHJ1bmNhdGVGaWxlTmFtZSgkb3JpZ2luYWxGaWxlTmFtZSwgMTI3KSwgJHRoaXMtPmdl
dEZvcm1Mb2NhbGUoKSk7CiAJCQkkYXJ0aWNsZS0+c2V0RmlsZU5hbWUoJG5ld0ZpbGVOYW1lLCAk
dGhpcy0+Z2V0Rm9ybUxvY2FsZSgpKTsKIAo=
</data>

          </attachment>
      

    </bug>

</bugzilla>