fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-04-09 05:22:13 +09:00
Code Issues Projects Releases Packages Wiki Activity

Don't allow uploading .php or .js files using the filebox #1796

Browse source
This commit is contained in:
Kijin Sung 2021-10-19 21:39:13 +09:00
parent 3467bf0ae3
commit 4fd1804d27
3 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
modules/module/module.controller.php
View file

@ -1070,6 +1070,10 @@ class moduleController extends module
throw new Rhymix\Framework\Exception('msg_error_occured');
}
}
if (in_array($ext, ['php', 'js']))
{
throw new Rhymix\Framework\Exception(sprintf(lang('msg_filebox_invalid_extension'), $ext));
}
$vars->member_srl = $logged_info->member_srl;