[TYPO3-core] RFC #11152: Warning in Import/Export Module

[Steffen Kamper]

Hi,

Peter Niederlag schrieb:
> Steffen Kamper schrieb:
>> Hi,
>>
>> +1 by reading and testing.
>> What caused the error, was it ereg_replace before?
> 
> yes, followup to #9994. I am just asking myself wether the . shouldn't
> get an escape as well?
> 
> $inData['filename'] =
> trim(preg_replace('/[^[:alnum:].\/_-]*/','',preg_replace('/\.(t3d|xml)$/','',$inData['filename'])));
> 
> opinions?
> 

there are exceptions when it's at the beginning or the end, but better 
to be safe and escape, so +1 for escape the dot also.

vg Steffen

btw - your client sends all messages twice