mirror of
https://gitee.com/zoujingli/ThinkAdmin.git
synced 2026-07-24 07:05:38 +08:00
Compare commits
2 Commits
ae5c6e7e22
...
e654ebdaf9
| Author | SHA1 | Date | |
|---|---|---|---|
|
|
e654ebdaf9 | ||
|
|
73c2b358fb |
@ -331,6 +331,7 @@ class Upload extends Controller
|
||||
$bins = hex2bin($hexs);
|
||||
/* 匹配十六进制中的 <% ( ) %> 或 <? ( ) ?> 或 <script | /script> */
|
||||
foreach (['<?php ', '<% ', '<script '] as $key) if (stripos($bins, $key) !== false) return true;
|
||||
return preg_match("/(3c25.*?28.*?29.*?253e)|(3c3f.*?28.*?29.*?3f3e)|(3C534352495054)|(2F5343524950543E)|(3C736372697074)|(2F7363726970743E)/is", $hexs);
|
||||
$result = preg_match("/(3c25.*?28.*?29.*?253e)|(3c3f.*?28.*?29.*?3f3e)|(3C534352495054)|(2F5343524950543E)|(3C736372697074)|(2F7363726970743E)/is", $hexs);
|
||||
return $result === false || $result > 0;
|
||||
}
|
||||
}
|
||||
|
||||
@ -51,7 +51,7 @@
|
||||
<div class="layui-form-item margin-bottom-5">
|
||||
<div class="help-label label-required-prev"><b>浏览器小图标</b>Browser Icon</div>
|
||||
<div class="relative block label-required-null">
|
||||
<label><input class="layui-input" required pattern="url" vali-name="图标文件" data-tips-image data-tips-hover placeholder="请上传浏览器图标" value="{:sysconf('site_icon')}" name="site_icon"></label>
|
||||
<input class="layui-input" required pattern="url" vali-name="图标文件" data-tips-image data-tips-hover placeholder="请上传浏览器图标" value="{:sysconf('site_icon')}" name="site_icon">
|
||||
<a class="input-right-icon layui-icon layui-icon-upload-drag" data-file="btn" data-type="png,jpg,jpeg" data-field="site_icon"></a>
|
||||
</div>
|
||||
<div class="help-block sub-span-blue">
|
||||
|
||||
Loading…
x
Reference in New Issue
Block a user