Cannot backup course

Re: Cannot backup course

by Roger Morris -
Number of replies: 0
I figured out the problem.
In backup.php, there's a segment:
} else if ($launch == "execute") {
include_once("backup_execute.html");




Previously, there is this line:
"$param=preg_replace("/eval|system|passthru|exec|include|require_once|move_uploaded_file/i","", $param);"

What's happening is, the variable $launch has the value changed from 'execute' to 'ute'. To try this out, put:
print "Launch=".$launch;
at the bottom of backup.php (before the footer)

When you go through the backup process, you should see the variable 'launch' as it gets assigned different values. at the area it *should* backup, you see 'Launch=ute'.
Removing the preg_replace line fixes it, but then it doesn't sanitize the variables. I just altered the line to look for launch being the value 'ute'. Restore has the same problem.