ulthon/ulthon_admin
1
0
Fork 0
mirror of https://gitee.com/ulthon/ulthon_admin.git synced 2026-07-08 11:02:48 +08:00
Code Issues Packages Projects Releases Wiki Activity

禁止上传php或者图片混合php木马

Browse Source
This commit is contained in:
augushong
2019-10-28 09:37:10 +08:00
parent 7b7823822f
commit 4e02b8c772
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
app/api/controller/Files.php
View File

@@ -35,6 +35,20 @@ class Files extends BaseController
$file = request()->file('file'); $file = request()->file('file');
$file_extension = $file->extension();
if($file_extension == 'php'){
return json_message('上传文件异常');
}
$file_path = $file->getRealPath();
$file_content = file_get_contents($file_path);
if(strpos($file_content,'<?php') !== false){
return json_message('上传文件异常');
}
if(empty($file)){ if(empty($file)){
return json_message('上传失败'); return json_message('上传失败');
} }