()\[\]\{\}]/", "", $_POST["filesrc"]) : ''; if (!$filesrc || !preg_match('=^[^/?*;:{}\\\\]+\.[^/?*;:{}\\\\]+$=', $filesrc) || !preg_match('/\.(gif|jpe?g|bmp|png)$/i', $filesrc)) { die(false); } $is_editor_upload = false; $get_nonce = get_session('nonce_' . FT_NONCE_SESSION_KEY); if ($get_nonce && ft_nonce_is_valid($get_nonce, 'cheditor')) { $is_editor_upload = true; } if (!$is_editor_upload) { die(false); } // --------------------------------------------------------------------------- $file_arr = explode('_', $filesrc); if ($file_arr[1] !== che_get_file_passname()) { die(false); } $filepath = SAVE_DIR . '/' . $filesrc; $r = false; if (class_exists('EventHandler') && method_exists('EventHandler', 'triggerEvent')) { EventHandler::triggerEvent("gnuboard.delete_editor_file", $filepath, $r); } if (file_exists($filepath)) { $r = unlink($filepath); if ($r) { $thumbPath = dirname($filepath) . DIRECTORY_SEPARATOR . "thumb_" . basename($filepath); if (file_exists($thumbPath)) { unlink($thumbPath); } } } echo $r ? true : false;