fix: security issue with image upload (#175)

2024-03-01 22:29:33 +01:00
parent 33a39c7042
commit 7b5e166e28
2 changed files with 16 additions and 1 deletions
@@ -157,6 +157,11 @@
                $logo = getLogoFromUrl($logoUrl, '../../images/uploads/logos/', $name);
            } else {
                if (!empty($_FILES['logo']['name'])) {
+                    $fileType = mime_content_type($_FILES['logo']['tmp_name']);
+                    if (strpos($fileType, 'image') === false) {
+                        echo translate("fill_all_fields", $i18n);
+                        exit();
+                    }
                    $logo = resizeAndUploadLogo($_FILES['logo'], '../../images/uploads/logos/', $name);
                }
            }