external/iiab
1
0
Fork 0
mirror of https://github.com/iiab/iiab.git synced 2025-03-09 15:40:17 +00:00
Code Issues Releases Wiki Activity

upload2usb.php: allow all word files, be more specific about xml mimetypes; log error message if user uploads invalid mimetype

Browse source
This commit is contained in:
avni 2025-01-23 06:51:43 +01:00
parent 68dafdbc39
commit 6dfda009e4
1 changed files with 2 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
roles/usb_lib/files/upload/upload2usb.php
View file

@ -55,9 +55,10 @@ function getFileCount ($folder_path) {
//check if file mimetype is acceptable for upload
function isFileMimeTypeAcceptable ($file) {
$mimetype = strtolower(mime_content_type($file));
$invalid_mimetypes_str = array ("compress", "octet", "xml", "zip");
$invalid_mimetypes_str = array ("compress", "image/svg+xml", "octet", "text/xml", "xhtml+xml", "zip");
foreach ($invalid_mimetypes_str as $invalid_mt_str) {
if (str_contains($mimetype, $invalid_mt_str)) {
error_log('UPLOAD2USB ERROR - MIMETYPE: ' . $mimetype);
return false;
}
}