fix(hwobs): 升级华为OBS云储存
This commit is contained in:
@@ -1 +1 @@
|
||||
{"files":["public\\assets\\addons\\hwobs\\js\\spark.js"],"license":"regular","licenseto":"34485","licensekey":"kaCpXL6B57yO89Rv h7EIXhuMw6+sCcUldTSJoQ==","domains":["localhost"],"licensecodes":[],"validations":["757319b447175b6ca1882635b132a594"]}
|
||||
{"files":["public\\assets\\addons\\hwobs\\js\\spark.js"],"license":"regular","licenseto":"34485","licensekey":"fE1oqlUNvPsVy07I LHfdNbd7Yb6AD1LjzKfdIA==","domains":[],"licensecodes":[],"validations":[]}
|
||||
@@ -47,7 +47,7 @@ return [
|
||||
'msg' => '',
|
||||
'tip' => '请输入你的Endpoint',
|
||||
'ok' => '',
|
||||
'extend' => 'data-rule-endpoint="[/^(?!http(s)?:\/\/).*$/, \'不能以http(s)://开头\']"',
|
||||
'extend' => 'data-rule-endpoint="[/^(?!http(s)?:\\/\\/).*$/, \'不能以http(s)://开头\']"',
|
||||
],
|
||||
[
|
||||
'name' => 'uploadurl',
|
||||
@@ -59,7 +59,7 @@ return [
|
||||
'msg' => '',
|
||||
'tip' => '请使用存储桶->基本信息->访问域名的值,并在前面加上http://或https://',
|
||||
'ok' => '',
|
||||
'extend' => 'data-rule-uploadurl="[/^http(s)?:\/\/.*$/, \'必需以http(s)://开头\']"',
|
||||
'extend' => 'data-rule-uploadurl="[/^http(s)?:\\/\\/.*$/, \'必需以http(s)://开头\']"',
|
||||
],
|
||||
[
|
||||
'name' => 'cdnurl',
|
||||
@@ -71,7 +71,7 @@ return [
|
||||
'msg' => '',
|
||||
'tip' => '如果你的云存储有绑定自定义域名,请输入自定义域名',
|
||||
'ok' => '',
|
||||
'extend' => 'data-rule-cdnurl="[/^http(s)?:\/\/.*$/, \'必需以http(s)://开头\']"',
|
||||
'extend' => 'data-rule-cdnurl="[/^http(s)?:\\/\\/.*$/, \'必需以http(s)://开头\']"',
|
||||
],
|
||||
[
|
||||
'name' => 'uploadmode',
|
||||
|
||||
@@ -39,6 +39,14 @@ class Index extends Controller
|
||||
$name = $this->request->post('name');
|
||||
$md5 = $this->request->post('md5');
|
||||
$chunk = $this->request->post('chunk');
|
||||
$name = xss_clean($name);
|
||||
|
||||
// 检查文件后缀
|
||||
$extension = strtolower(pathinfo($name, PATHINFO_EXTENSION));
|
||||
$allowedExtensions = explode(',', strtolower($config['mimetype']));
|
||||
if (!in_array($extension, $allowedExtensions) || in_array($extension, ['php', 'html', 'htm', 'phar', 'phtml']) || preg_match("/^php(.*)/i", $extension)) {
|
||||
$this->error('不允许的文件类型');
|
||||
}
|
||||
|
||||
$key = (new Upload())->getSavekey($config['savekey'], $name, $md5);
|
||||
$key = ltrim($key, "/");
|
||||
@@ -86,7 +94,6 @@ class Index extends Controller
|
||||
$params['headers'] = $headers;
|
||||
$params['date'] = $date;
|
||||
$this->success('', null, $params);
|
||||
return;
|
||||
}
|
||||
|
||||
/**
|
||||
|
||||
@@ -3,7 +3,7 @@ title = 华为OBS云储存
|
||||
intro = 使用华为OBS作为默认云储存
|
||||
author = FastAdmin
|
||||
website = https://www.fastadmin.net
|
||||
version = 1.2.9
|
||||
version = 1.2.10
|
||||
state = 1
|
||||
url = /addons/hwobs
|
||||
license = regular
|
||||
|
||||
Reference in New Issue
Block a user