Found a Bug In 3.10.4

I believe there is a bug in oc-includes/AjaxUploader.php as a bot was trying to hit the upload endpoint without a proper request and triggered a fatal error.

[19-Feb-2026 12:17:08 America/Vancouver] PHP Fatal error: Uncaught Error: Call to a member function getOriginalName() on bool in /home/username/public_html/oc-includes/AjaxUploader.php:23
Stack trace:
#0 /home/username/public_html/oc-includes/osclass/controller/ajax.php(293): AjaxUploader->getOriginalName()
#1 /home/username/public_html/index.php(119): CWebAjax->doModel()
#2 {main}
thrown in /home/username/public_html/oc-includes/AjaxUploader.php on line 23

There is an unprotected getOriginalName() method in oc-includes/AjaxUploader.php at line 23

ie:

public function getOriginalName() { return $this->_file->getOriginalName(); }

which I fixed this:

public function getOriginalName() { if(!$this->_file) { return false; } return $this->_file->getOriginalName(); }