Browse Source

限制文件上传类型,修复上传漏洞

新疆警官学校中职
dao 8 months ago
parent
commit
f9349dabfb
2 changed files with 4 additions and 4 deletions
  1. +1
    -1
      Learun.Framework.Ultimate V7/Learun.Application.Web/Areas/LR_OAModule/Views/ResourceFile/UploadifyForm.js
  2. +3
    -3
      Learun.Framework.Ultimate V7/Learun.Application.Web/XmlConfig/database.config

+ 1
- 1
Learun.Framework.Ultimate V7/Learun.Application.Web/Areas/LR_OAModule/Views/ResourceFile/UploadifyForm.js View File

@@ -31,7 +31,7 @@ var bootstrap = function ($, learun) {
dnd: '#lr_form_file_queue',
paste: 'document.body',
accept: {
extensions: "*"
extensions: "jpg,rar,zip,7z,jpeg,gif,png,doc,docx,xls,xlsx,pdf,ppt,pptx"
},
multiple: true,
// 上传参数


+ 3
- 3
Learun.Framework.Ultimate V7/Learun.Application.Web/XmlConfig/database.config View File

@@ -16,9 +16,9 @@
<!--<add name="BaseDb" connectionString="Server=123.57.209.16;Initial Catalog=adms7ultimate2;User ID=sa;Password=bjqjkj@2014~2015!" providerName="System.Data.SqlClient" />
<add name="CollegeMIS" connectionString="Server=123.57.209.16;Initial Catalog=CollegeMIS;User ID=sa;Password=bjqjkj@2014~2015!" providerName="System.Data.SqlClient" />
<add name="hangfireString" connectionString="Server=123.57.209.16;Initial Catalog=Hangfire;User ID=sa;Password=bjqjkj@2014~2015!" providerName="System.Data.SqlClient" />-->
<add name="BaseDb" connectionString="Server=123.57.209.16;Initial Catalog=adms7ultimate2_新疆司法;User ID=sa;Password=bjqjkj@2014~2015!" providerName="System.Data.SqlClient" />
<add name="CollegeMIS" connectionString="Server=123.57.209.16;Initial Catalog=CollegeMIS_新疆司法;User ID=sa;Password=bjqjkj@2014~2015!" providerName="System.Data.SqlClient" />
<add name="hangfireString" connectionString="Server=123.57.209.16;Initial Catalog=Hangfire;User ID=sa;Password=bjqjkj@2014~2015!" providerName="System.Data.SqlClient" />
<add name="BaseDb" connectionString="Server=123.57.209.16,53314;Initial Catalog=adms7ultimate2_新疆司法;User ID=sa;Password=bjqjkj@2014~2015!" providerName="System.Data.SqlClient" />
<add name="CollegeMIS" connectionString="Server=123.57.209.16,53314;Initial Catalog=CollegeMIS_新疆司法;User ID=sa;Password=bjqjkj@2014~2015!" providerName="System.Data.SqlClient" />
<add name="hangfireString" connectionString="Server=123.57.209.16,53314;Initial Catalog=Hangfire;User ID=sa;Password=bjqjkj@2014~2015!" providerName="System.Data.SqlClient" />
<add name="paikeDbString" connectionString="Data Source=8.141.155.183;Port=23306;Database=paikexjjx;User ID=root;Password=QJKJ@bjqj@123;" providerName="MySql.Data.MySqlClient" />
<!--金隅-->
<!--<add name="BaseDb" connectionString="Server=39.97.168.125;Initial Catalog=adms7ultimate2;User ID=sa;Password=bjqjkj@2014~2015!" providerName="System.Data.SqlClient" />


Loading…
Cancel
Save