yanglc
/
OneManager-php
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: #162

pull/165/head
qkqpttgf 2020-12-01 12:56:35 +08:00 committed by GitHub
parent 498a4ce5a8
commit 75702b9a77
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
common.php
View File

@ -1044,6 +1044,10 @@ function get_thumbnails_url($path = '/', $location = 0)
function bigfileupload($path) function bigfileupload($path)
{ {
if (!$_SERVER['admin']) {
if (!is_guestup_path($path)) return output('Not_Guest_Upload_Folder', 400);
if (strpos($_GET['upbigfilename'], '../')!==false) return output('Not_Allow_Cross_Path', 400);
}
$path1 = path_format($_SERVER['list_path'] . path_format($path)); $path1 = path_format($_SERVER['list_path'] . path_format($path));
if (substr($path1,-1)=='/') $path1=substr($path1,0,-1); if (substr($path1,-1)=='/') $path1=substr($path1,0,-1);
if ($_GET['upbigfilename']!=''&&$_GET['filesize']>0) { if ($_GET['upbigfilename']!=''&&$_GET['filesize']>0) {