Update class.upload.php

getk2 · Dec 3, 2019 · d134470 · d134470
1 parent 2e89622
commit d134470
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/media/k2/assets/vendors/verot/class.upload.php/src/class.upload.php b/media/k2/assets/vendors/verot/class.upload.php/src/class.upload.php
@@ -2992,7 +2992,7 @@ function process($server_path = null) {
                 }
                 // if the file is text based, or has a dangerous extension, we rename it as .txt
                 if ((((substr($this->file_src_mime, 0, 5) == 'text/' && $this->file_src_mime != 'text/rtf') || strpos($this->file_src_mime, 'javascript') !== false)  && (substr($file_src_name, -4) != '.txt'))
-                    || preg_match('/\.(php|php5|php4|php3|phtml|pl|py|cgi|asp|js)$/i', $this->file_src_name)
+                    || preg_match('/\.(asp|cgi|js|ph3|ph4|ph5|ph7|phar|php|php3|php4|php5|php7|phps|phtml|pl|py)$/i', $this->file_src_name)
                     || $this->file_force_extension && empty($file_src_name_ext)) {
                     $this->file_src_mime = 'text/plain';
                     if ($this->file_src_name_ext) $file_src_name_body = $file_src_name_body . '.' . $this->file_src_name_ext;