fanbinit/rhymix
1
0
Fork 0
mirror of https://github.com/Lastorder-DC/rhymix.git synced 2026-05-11 21:12:15 +09:00
Code Issues Projects Releases Packages Wiki Activity

Don't treat failed upload as security issue, fix #1451

Browse source
This commit is contained in:
Kijin Sung 2020-10-30 21:50:46 +09:00
parent a3271c6a40
commit dff97a9604
1 changed files with 6 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

8
classes/context/Context.class.php
View file

@ -1200,8 +1200,9 @@ class Context
$tmp_name = $val['tmp_name']; $tmp_name = $val['tmp_name'];
if(!is_array($tmp_name)) if(!is_array($tmp_name))
{ {
if($val['name'] === '' && $val['size'] == 0) if(($val['name'] === '' || !$val['tmp_name']) && intval($val['size']) == 0)
{ {
unset($_FILES[$key]);
continue; continue;
} }
if(!UploadFileFilter::check($tmp_name, $val['name'])) if(!UploadFileFilter::check($tmp_name, $val['name']))
@ -1220,8 +1221,11 @@ class Context
$files = array(); $files = array();
foreach ($tmp_name as $i => $j) foreach ($tmp_name as $i => $j)
{ {
if($val['name'][$i] === '' && $val['size'][$i] == 0) if(($val['name'][$i] === '' || !$val['tmp_name'][$i]) && intval($val['size'][$i]) == 0)
{ {
unset($_FILES[$key]['name'][$i]);
unset($_FILES[$key]['tmp_name'][$i]);
unset($_FILES[$key]['size'][$i]);
continue; continue;
} }
if(!UploadFileFilter::check($val['tmp_name'][$i], $val['name'][$i])) if(!UploadFileFilter::check($val['tmp_name'][$i], $val['name'][$i]))