r31k
/
bludit
2
0
Fork 0
Code Issues 1 Pull Requests Releases Wiki Activity

Check file extension, bug fix #1011

This commit is contained in:
Diego Najar 2019-05-27 19:24:11 +02:00
parent f317d8cff7
commit 0dc9904d62
1 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
bl-kernel/ajax/logo-upload.php
View File

@ -6,7 +6,11 @@ if (!isset($_FILES['inputFile'])) {
} }
// File extension // File extension
$fileExtension = pathinfo($_FILES['inputFile']['name'], PATHINFO_EXTENSION); $fileExtension = Filesystem::extension($_FILES['inputFile']['name']);
$fileExtension = Text::lowercase($fileExtension);
if (!in_array($fileExtension, ALLOWED_IMG_EXTENSION) ) {
return false;
}
// Final filename // Final filename
$filename = 'logo.'.$fileExtension; $filename = 'logo.'.$fileExtension;
@ -21,7 +25,7 @@ if ($oldFilename) {
} }
// Move from temporary directory to uploads // Move from temporary directory to uploads
rename($_FILES['inputFile']['tmp_name'], PATH_UPLOADS.$filename); Filesystem::mv($_FILES['inputFile']['tmp_name'], PATH_UPLOADS.$filename);
// Permissions // Permissions
chmod(PATH_UPLOADS.$filename, 0644); chmod(PATH_UPLOADS.$filename, 0644);