blackteay/ThinkAdmin
1
0
Fork 0
mirror of https://gitee.com/zoujingli/ThinkAdmin.git synced 2025-09-10 14:29:46 +08:00
Code Issues Projects Releases Wiki Activity

修改图片安全处理

Browse Source
This commit is contained in:
Anyon 2021-12-31 12:27:32 +08:00
parent b8c2c00b85
commit 8bf2ad4cbc
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/data/controller/api/auth/Center.php
View File

@ -57,10 +57,10 @@ class Center extends Auth
$data = $this->_vali(['base64.require' => '图片内容不为空！']); $data = $this->_vali(['base64.require' => '图片内容不为空！']);
if (preg_match('|^data:image/(.*?);base64,|i', $data['base64'])) { if (preg_match('|^data:image/(.*?);base64,|i', $data['base64'])) {
[$ext, $img] = explode('|||', preg_replace('|^data:image/(.*?);base64,|i', '$1|||', $data['base64'])); [$ext, $img] = explode('|||', preg_replace('|^data:image/(.*?);base64,|i', '$1|||', $data['base64']));
if (!in_array(strtolower($ext), ['png', 'jpg', 'jpeg'])) { if (empty($ext) || !in_array(strtolower($ext), ['png', 'jpg', 'jpeg'])) {
$this->error('图片格式异常！'); $this->error('图片格式异常！');
} }
$info = Storage::instance()->set(Storage::name($img, $ext ?: 'png', 'image/'), base64_decode($img)); $info = Storage::instance()->set(Storage::name($img, $ext, 'image/'), base64_decode($img));
$this->success('图片上传成功！', ['url' => $info['url']]); $this->success('图片上传成功！', ['url' => $info['url']]);
} else { } else {
$this->error('解析内容失败！'); $this->error('解析内容失败！');