ueditor1_3_6 一点问题记录

时间 2019-11-15

标签 ueditor1 ueditor 一点 1点问题记录繁體版

原文原文链接

文件：getRemoteImage.phpphp

第49行：html

if ( !in_array( $fileType , $config[ 'allowFiles' ] ) || stristr( $heads[ 'Content-Type' ] , "image" ) ) {
                array_push( $tmpNames , "error" );
                continue;
            }

$heads[ 'Content-Type' ] 永远为空，由于没有这个数组键数组

因此
true || false 退出
false || false 继续执行url

$heads[ 'Content-Type' ] 永远为空为何为空：htm

第40行：blog

$heads = get_headers( $imgUrl );

print_r(get_headers($url));

print_r(get_headers($url, 1));

Array
(
    [0] => HTTP/1.1 200 OK
    [1] => Date: Sat, 29 May 2004 12:28:13 GMT
    [2] => Server: Apache/1.3.27 (Unix)  (Red-Hat/Linux)
    [3] => Last-Modified: Wed, 08 Jan 2003 23:11:55 GMT
    [4] => ETag: "3f80f-1b6-3e1cb03b"
    [5] => Accept-Ranges: bytes
    [6] => Content-Length: 438
    [7] => Connection: close
    [8] => Content-Type: text/html
)

Array
(
    [0] => HTTP/1.1 200 OK
    [Date] => Sat, 29 May 2004 12:28:14 GMT
    [Server] => Apache/1.3.27 (Unix)  (Red-Hat/Linux)
    [Last-Modified] => Wed, 08 Jan 2003 23:11:55 GMT
    [ETag] => "3f80f-1b6-3e1cb03b"
    [Accept-Ranges] => bytes
    [Content-Length] => 438
    [Connection] => close
    [Content-Type] => text/html
)

因此$heads[ 'Content-Type' ] 永远为空，由于没有这个数组键，结果永远false图片

因此，在验证的时候，图片的Content-Type 以及非图片的Content-Type 都可以请求成功get

达不到//格式验证(扩展名验证和Content-Type验证)里面的Content-Type验证结果。io

验证的两点：ast

一、后缀只能为图片后缀

二、Content-Type 只能为image*