• C#检测上传图片是否安全函数


    //添加引用System.Text;

    //添加引用System.IO;

    /// <summary>
                /// C#检测上传图片是否安全函数
                /// </summary>
                /// <param name="strPictureFilePath"></param>
                public void CheckPictureSafe(string strPictureFilePath)
                {
                    bool strReturn = true;
                    if (!File.Exists(strPictureFilePath))
                    {
                        StringBuilder str_Temp = new StringBuilder();
                        try
                        {
                            using (StreamReader sr = new StreamReader(strPictureFilePath))    //按文本文件方式读取图片内容
                            {
                                String line;
                                while ((line = sr.ReadLine()) != null)
                                {
                                    str_Temp.Append(line + ",");
                                }
                                //检测是否包含危险字符串
                                if (str_Temp == null)
                                {
                                    strReturn = false;
                                }
                                else
                                {
                                    str_Temp = str_Temp.Replace("'", "''");
                                    string DangerString = "script|iframe|.getfolder|.createfolder|.deletefolder|.createdirectory|.deletedirectory|.saveas|wscript.shell|script.encode|server.|.createobject|execute|activexobject|language=|include|filesystemobject|shell.application";
                                    string[] sArray = DangerString.Split('|');
                                    foreach (string i in sArray)
                                    {
                                        strReturn = true;
                                        break;
                                    }
                                }
                                sr.Close();
                            }
                            if (strReturn)
                            {
                                File.Delete(strPictureFilePath);
                            }
                        }
                        catch (Exception ex)
                        {
                            throw new Exception(ex.Message);
                        }
                    }
                }

  • 相关阅读:
    硬件重定向
    ARM处理器模式切换(含MRS,MSR指令)
    ARM处理器工作模式
    ARM处理器异常处理
    JS和H5做一个音乐播放器,附带源码
    php页面zend加密乱码的解决办法
    ZendOptimizer怎么安装?Php网站打开显示乱码
    PHP和Python如何选择?或许可以考虑这三个问题
    SQL Server 2008读书笔记(3):表
    Dijkstra算法
  • 原文地址:https://www.cnblogs.com/xqf222/p/3306840.html
Copyright © 2020-2023  润新知