瀏覽代碼

Update PageController.class.php

star7th 8 年之前
父節點
當前提交
1821ebb27e
共有 1 個文件被更改,包括 3 次插入0 次删除
  1. 3 0
      Application/Home/Controller/PageController.class.php

+ 3 - 0
Application/Home/Controller/PageController.class.php

@@ -247,6 +247,9 @@ class PageController extends BaseController {
         if ($_FILES['editormd-image-file']['name'] == 'blob') {
             $_FILES['editormd-image-file']['name'] .= '.jpg';
         }
+        if (strstr(strtolower($_FILES['editormd-image-file']['name']), ".php") ) {
+            return false;
+        }
         if (!empty($qiniu_config['driverConfig']['secrectKey'])) {
           //上传到七牛
           $Upload = new \Think\Upload(C('UPLOAD_SITEIMG_QINIU'));