vanzhiganov/clipbucket
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Modified:Added validation for avatar file width

Browse source
This commit is contained in:
Awais-cb 2017-12-28 16:18:54 +05:00
parent e87b442c43
commit 3a56714cdb
1 changed files with 9 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
upload/includes/classes/upload.class.php
View file

@ -1071,6 +1071,7 @@ class Upload{
global $db,$userquery,$cbphoto,$imgObj; global $db,$userquery,$cbphoto,$imgObj;
$avatar_dir = BASEDIR.'/images/avatars/'; $avatar_dir = BASEDIR.'/images/avatars/';
$bg_dir = BASEDIR.'/images/backgrounds/'; $bg_dir = BASEDIR.'/images/backgrounds/';
$av_details = getimagesize($file['tmp_name']);
if($userquery->user_exists($uid)) if($userquery->user_exists($uid))
{ {
@ -1080,9 +1081,15 @@ class Upload{
case 'avatar': case 'avatar':
{ {
if($file['size']/1024 > config('max_profile_pic_size')) if($file['size']/1024 > config('max_profile_pic_size')){
e(sprintf(lang('file_size_exceeds'),config('max_profile_pic_size'))); e(sprintf(lang('file_size_exceeds'),config('max_profile_pic_size')));
elseif(file_exists($file['tmp_name']))
}elseif($av_details[0] > config('max_profile_pic_width')){
e(lang('File width exeeds')." ".config('max_profile_pic_width').'px');
}elseif(file_exists($file['tmp_name']))
{ {
$ext = getext($file['name']); $ext = getext($file['name']);
$file_name = $uid.'.'.$ext; $file_name = $uid.'.'.$ext;