仅支持上传图片文件。close: #78

NewLifeX · Sep 3, 2024 · 1b6ddfe · 1b6ddfe
1 parent 6ca3c57
commit 1b6ddfe
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 0 deletions.
diff --git a/NewLife.Cube/Areas/Admin/Controllers/UserController.cs b/NewLife.Cube/Areas/Admin/Controllers/UserController.cs
@@ -383,6 +383,12 @@ public async Task<ActionResult> Info(User user)
         var file = HttpContext.Request.Form.Files["avatar"];
         if (file != null)
         {
+            var ext = Path.GetExtension(file.FileName);
+            //if (ext.EqualIgnoreCase(".exe", ".bat", ".com", ".vbs", ".js", ".jar", ".msi", ".lnk"))
+            //    throw new Exception("禁止上传可执行文件！");
+            if (!ext.EqualIgnoreCase(".png", ".jpg", ".gif", ".bmp", ".tiff", ".svg"))
+                throw new Exception("仅支持上传图片文件！");
+
             //var set = CubeSetting.Current;
             //var fileName = user.ID + Path.GetExtension(file.FileName);
             var att = await SaveFile(user, file, null, null);

diff --git a/NewLife.CubeNC/Areas/Admin/Controllers/UserController.cs b/NewLife.CubeNC/Areas/Admin/Controllers/UserController.cs
@@ -565,6 +565,10 @@ public async Task<ActionResult> Info(User user)
         var file = HttpContext.Request.Form.Files["avatar"];
         if (file != null)
         {
+            var ext = Path.GetExtension(file.FileName);
+            if (!ext.EqualIgnoreCase(".png", ".jpg", ".gif", ".bmp", ".tiff", ".svg"))
+                throw new Exception("仅支持上传图片文件！");
+
             //var set = CubeSetting.Current;
             //var fileName = user.ID + Path.GetExtension(file.FileName);
             var att = await SaveFile(user, file, null, null);