opencart/opencart — pull request #872 by teslitsky (2013-09-07 17:17:37+00:00)
Title: Protection from unauthorized file upload in product/product/upload

OpenCart has no checks from unauthorized uploading files via the product/product/upload action. There is only a test for mime type of the uploaded file, but the page with the following code allows you to upload any number of files on the server, filling all available space.
```html

```
This code adds a check for compliance with csrf parameter.