Merge branch 'mayue_fix_bug#21980' into 'master'

* Fix bug #21980. See merge request easycorp/zentaopms!3124
2022-04-26 05:06:22 +00:00
parent 6ba9bfee42 eebfc3c70f
commit 41f5a6bf2e
1 changed files with 6 additions and 0 deletions
@@ -49,6 +49,12 @@ class file extends control
    public function ajaxUpload($uid = '')
    {
        $file = $this->file->getUpload('imgFile');
+
+        if(!isset($file[0]) or !in_array($file[0]['extension'], $this->config->file->imageExtensions))
+        {
+            return print(json_encode(array('result' => 'fail', 'message' => $this->lang->file->errorFileFormate)));
+        }
+
        $file = $file[0];
        if($file)
        {