firstgarden/firstgarden-web-gnu
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Activity

파일 업로드 취약점 수정

Browse Source
This commit is contained in:
thisgun
2017-12-18 12:21:23 +09:00
parent 875a326344
commit 1e41f6a8ff
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
lib/common.lib.php
View File

@ -2952,9 +2952,13 @@ function replace_filename($name)
@session_start(); @session_start();
$ss_id = session_id(); $ss_id = session_id();
$usec = get_microtime(); $usec = get_microtime();
$ext = array_pop(explode('.', $name)); $file_path = pathinfo($name);
$ext = $file_path['extension'];
$return_filename = sha1($ss_id.$_SERVER['REMOTE_ADDR'].$usec);
if( $ext )
$return_filename .= '.'.$ext;
return sha1($ss_id.$_SERVER['REMOTE_ADDR'].$usec).'.'.$ext; return $return_filename;
} }
// 아이코드 사용자정보 // 아이코드 사용자정보