* Fix bug #21980.

2022-04-26 03:23:02 +00:00
parent 16a626adf0
commit eebfc3c70f
1 changed files with 6 additions and 0 deletions
@@ -49,6 +49,12 @@ class file extends control
    public function ajaxUpload($uid = '')
    {
        $file = $this->file->getUpload('imgFile');
+
+        if(!isset($file[0]) or !in_array($file[0]['extension'], $this->config->file->imageExtensions))
+        {
+            return print(json_encode(array('result' => 'fail', 'message' => $this->lang->file->errorFileFormate)));
+        }
+
        $file = $file[0];
        if($file)
        {