strtolower file extension

anvc · Jun 28, 2022 · 3386fe4 · 3386fe4
1 parent 40da06b
commit 3386fe4
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/system/application/libraries/File_Upload.php b/system/application/libraries/File_Upload.php
@@ -134,7 +134,7 @@ private function is_allowed($file) {
         if (stristr($file, './')) return false;
         if ('.' == substr($file, 0, 1)) return false;
         if ('google' == substr($file, 0, 6)) return false;
-        $ext = pathinfo($file, PATHINFO_EXTENSION);
+        $ext = strtolower(pathinfo($file, PATHINFO_EXTENSION));
         if (empty($ext)) return false; // Require a file extension
         if ('php' == $ext || 'php' == substr($ext, 0, 3)) return false;
         if (stristr($file, '.php')) return false;
@@ -257,4 +257,4 @@ private function getStorage($bookSlug, $adapter, $adapterOptions) {
     }
 }
 
-?>
+?>