Changeset 15056 for branches/beta/html/resize_image.php

Timestamp:

2007/07/18 10:17:57 (17 years ago)

Author:

adati

Message:

relブランチのマージ(r12156-r15055)

File:

• branches/beta/html/resize_image.php (modified) (1 diff)

branches/beta/html/resize_image.php

@@ -5 +5 @@
 
 require_once($include_dir . HTML2DATA_DIR. "lib/gdthumb.php");
-require_once($include_dir . HTML2DATA_DIR. "conf/conf.php");    
+require_once($include_dir . HTML2DATA_DIR. "lib/glib.php");
+require_once($include_dir . HTML2DATA_DIR. "conf/conf.php");
 
 $objThumb = new gdthumb();
 
-$file = $_GET["image"];
+$file = NO_IMAGE_DIR;
+
+// NO_IMAGE_DIR°Ê³°¤Î¥Õ¥¡¥¤¥ë̾¤¬ÅϤµ¤ì¤¿¾ì¹ç¡¢¥Õ¥¡¥¤¥ë̾¤Î¥Á¥§¥Ã¥¯¤ò¹Ô¤¦
+if ( isset($_GET['image']) && $_GET['image'] !== NO_IMAGE_DIR) {
+    
+    // ¥Õ¥¡¥¤¥ë̾¤¬Àµ¤·¤¤¾ì¹ç¤À¤±¡¢$file¤òÀßÄê
+    if ( lfCheckFileName() === true ) {
+        $file = IMAGE_SAVE_DIR . $_GET['image'];
+    } else {
+        gfPrintLog('invalid access :resize_image.php $_GET["image"]=' . $_GET['image']);
+    }
+}
+
 if(file_exists($file)){
-    $objThumb->Main($file, $_GET["width"], $_GET["height"], "", true);
+    $objThumb->Main($file, $_GET["width"], $_GET["height"], "", true);
 }else{
-    $objThumb->Main(NO_IMAGE_DIR, $_GET["width"], $_GET["height"], "", true);
+    $objThumb->Main(NO_IMAGE_DIR, $_GET["width"], $_GET["height"], "", true);
+}
+
+// ¥Õ¥¡¥¤¥ë̾¤Î·Á¼°¤ò¥Á¥§¥Ã¥¯
+function lfCheckFileName() {
+    //$pattern = '|^[0-9]+_[0-9a-z]+\.[a-z]{3}$|';
+    $pattern = '|\./|';
+    $file    = trim($_GET["image"]);
+    if ( preg_match_all($pattern, $file, $matches) ) {
+        return false;
+    } else {
+        return true;
+    }
 }