blackteay/ThinkAdmin
1
0
Fork 0
mirror of https://gitee.com/zoujingli/ThinkAdmin.git synced 2025-04-06 03:58:04 +08:00
Code Issues Projects Releases Wiki Activity

Update Config.php

Browse Source
This commit is contained in:
邹景立 2021-05-12 17:21:36 +08:00
parent f4c3f659a6
commit 9adad7e15f
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
app/admin/controller/Config.php
View File

@ -92,9 +92,11 @@ class Config extends Controller
} else { } else {
$post = $this->request->post(); $post = $this->request->post();
if (!empty($post['storage']['allow_exts'])) { if (!empty($post['storage']['allow_exts'])) {
$deny = ['sh', 'bat', 'cmd', 'exe', 'php', 'asp']; $exts = array_unique(str2arr(strtolower($post['storage']['allow_exts'])));
$exts = array_unique(explode(',', strtolower($post['storage']['allow_exts']))); foreach (['sh', 'asp', 'bat', 'cmd', 'exe', 'php'] as $ext) {
if (sort($exts) && in_array('php', $deny)) $this->error('禁止上传可执行的文件！'); if (in_array($ext, $exts)) $this->error('禁止上传可执行的文件！');
}
sort($exts);
$post['storage']['allow_exts'] = join(',', $exts); $post['storage']['allow_exts'] = join(',', $exts);
} }
foreach ($post as $name => $value) sysconf($name, $value); foreach ($post as $name => $value) sysconf($name, $value);