DedeV6/src/admin/dialog/select_templets_post.php

<?php
/**
 * 模板发送
 *
 * @version        $Id: select_templets_post.php 1 9:43 2010年7月8日Z tianya $
 * @package        DedeBIZ.Dialog
 * @copyright      Copyright (c) 2022, DedeBIZ.COM
 * @license        https://www.dedebiz.com/license
 * @link           https://www.dedebiz.com
 */
require_once(dirname(__FILE__)."/config.php");
$cfg_txttype = "htm|html|tpl|txt";
if (empty($uploadfile)) {
    $uploadfile = "";
}
if (!is_uploaded_file($uploadfile)) {
    ShowMsg("您没有选择上传的文件!", "-1");
    exit();
}
if (!preg_match("#^text#", $uploadfile_type)) {
    ShowMsg("您上传的不是文本类型附件!", "-1");
    exit();
}
if (!preg_match("#\.(".$cfg_txttype.")#i", $uploadfile_name)) {
    ShowMsg("您所上传的模板文件类型不能被识别，只允许htm、html、tpl、txt扩展名", "-1");
    exit();
}
if ($filename =='') {
    $filename = $uploadfile_name;
}
$filename = trim(preg_replace("#[ \r\n\t\*\%\\\/\?><\|\":]{1,}#", '', $filename));
if ($filename == '' || !preg_match("#\.(" . $cfg_txttype . ")#i", $filename)) {
       ShowMsg("您所上传的文件存在问题，请检查文件类型是否适合", "-1");
}
$fullfilename = $cfg_basedir.$activepath."/".$filename;
move_uploaded_file($uploadfile, $fullfilename) or die("上传文件到 $fullfilename 失败");
@unlink($uploadfile);
ShowMsg("成功上传文件", "select_templets.php?comeback=".urlencode($filename)."&f=$f&activepath=".urlencode($activepath)."&d=".time());
exit();