I just applied the latest patches to my Drupal 4.6.3 site, and am having problems because the patch removed the function valid_input_data from common.inc, however the function is still called from within file.inc (in function file_save_data, line 419). Can anyone tell me if I've done something wrong with the patches, or how to get around this???

Thanks in advance.

Comments

hexa’s picture

i have the same problem.
Should i remove:
if (!user_access('bypass input data check') && !valid_input_data($file)) {
watchdog('security', t('Possible exploit abuse: invalid data.'), WATCHDOG_WARNING);
drupal_set_message(t('File upload failed: invalid data.'), 'error');
return 0;
}
?
Or is this a security risk?