From cab331d1fa6a57b9beb83be4393fa5b0acc94fb9 Mon Sep 17 00:00:00 2001
From: z <wyd621@163.com>
Date: Mon, 22 Jun 2020 10:34:57 +0800
Subject: [PATCH]  * finish task #7268.

---
 module/file/view/buildform.html.php | 19 ++++++++++++++++++-
 1 file changed, 18 insertions(+), 1 deletion(-)

diff --git a/module/file/view/buildform.html.php b/module/file/view/buildform.html.php
index f4dc08f256..ee6c113b73 100644
--- a/module/file/view/buildform.html.php
+++ b/module/file/view/buildform.html.php
@@ -3,6 +3,7 @@
 .file-input .file-editbox{max-width:40%;}
 .file-input-list .input-group-btn{float:left}
 </style>
+<?php js::set('dangerExtensions', ',' . $this->config->file->dangers . ',');?>
 <div class="file-input-list" data-provide="fileInputList" data-each-file-max-size="<?php echo $maxUploadSize;?>" data-file-size-error="<?php echo sprintf($lang->file->errorFileSize, $maxUploadSize);?>">
   <div class="file-input">
     <div class="file-input-empty">
@@ -27,6 +28,22 @@
         <button type="button" class="btn btn-link file-input-delete"><?php echo $lang->delete;?></button>
       </div>
     </div>
-    <input type="file" name="<?php echo $filesName;?>[]">
+    <input type="file" name="<?php echo $filesName;?>[]" onchange="checkExtension(this)" />
   </div>
 </div>
+<script>
+function checkExtension(obj)
+{
+    var fileName = $(obj).val();
+    var index    = fileName.lastIndexOf(".");
+    if(index >= 0)
+    {
+        extension = fileName.substr(index + 1);
+        if(dangerExtensions.lastIndexOf(',' + extension + ','))
+        {
+            alert(<?php echo json_encode($this->lang->file->dangerFile);?>);
+            $(obj).val('');
+        }
+    }
+}
+</script>