xpressengine / xe-core

classes/security/UploadFileFilter.class.php

Spacing +13 added lines, -13 removed lines

@@ -3,43 +3,43 @@
 
 class UploadFileFilter
 {
-	private static $_block_list = array ('exec', 'system', 'passthru', 'show_source', 'phpinfo', 'fopen', 'file_get_contents', 'file_put_contents', 'fwrite', 'proc_open', 'popen');
+	private static $_block_list = array('exec', 'system', 'passthru', 'show_source', 'phpinfo', 'fopen', 'file_get_contents', 'file_put_contents', 'fwrite', 'proc_open', 'popen');
 
 	public function check($file)
 	{
 		// TODO: 기능개선후 enable
 
 		return TRUE; // disable
-		if (! $file || ! FileHandler::exists($file)) return TRUE;
-		return self::_check ( $file );
+		if (!$file || !FileHandler::exists($file)) return TRUE;
+		return self::_check($file);
 	}
 
 	private function _check($file)
 	{
-		if (! ($fp = fopen ( $file, 'r' ))) return FALSE;
+		if (!($fp = fopen($file, 'r'))) return FALSE;
 
 		$has_php_tag = FALSE;
 
-		while ( ! feof ( $fp ) )
+		while (!feof($fp))
 		{
-			$content = fread ( $fp, 8192 );
+			$content = fread($fp, 8192);
 			if (FALSE === $has_php_tag)
 			{
-				$has_php_tag = strpos ( $content, '<?' );
-				$has_php_tag |= strpos ( $content, '<%' );
-				$has_php_tag |= preg_match ( '/<script.*language=.?php.?.*>/', $content );
+				$has_php_tag = strpos($content, '<?');
+				$has_php_tag |= strpos($content, '<%');
+				$has_php_tag |= preg_match('/<script.*language=.?php.?.*>/', $content);
 			}
-			foreach ( self::$_block_list as $v )
+			foreach (self::$_block_list as $v)
 			{
-				if (FALSE !== $has_php_tag && FALSE !== strpos ( $content, $v ))
+				if (FALSE !== $has_php_tag && FALSE !== strpos($content, $v))
 				{
-					fclose ( $fp );
+					fclose($fp);
 					return FALSE;
 				}
 			}
 		}
 
-		fclose ( $fp );
+		fclose($fp);
 
 		return TRUE;
 	}

Braces +6 added lines, -2 removed lines

@@ -10,13 +10,17 @@
 		// TODO: 기능개선후 enable
 
 		return TRUE; // disable
-		if (! $file || ! FileHandler::exists($file)) return TRUE;
+		if (! $file || ! FileHandler::exists($file)) {
+			return TRUE;
+		}
 		return self::_check ( $file );
 	}
 
 	private function _check($file)
 	{
-		if (! ($fp = fopen ( $file, 'r' ))) return FALSE;
+		if (! ($fp = fopen ( $file, 'r' ))) {
+			return FALSE;
+		}
 
 		$has_php_tag = FALSE;