Merge branch '5.5'

WoltLab · Jul 28, 2023 · 62f4b76 · 62f4b76
2 parents 32d8691 + c4f8608
commit 62f4b76
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/wcfsetup/install/files/lib/util/FileUtil.class.php b/wcfsetup/install/files/lib/util/FileUtil.class.php
@@ -616,6 +616,16 @@ public static function getIconNameByFilename(string $filename): string
         return '';
     }
 
+    /**
+     * Returns whether the given $extension might allow for execution of
+     * PHP code and thus must not be used for untrusted files uploaded by
+     * a user.
+     */
+    public function extensionAllowsPhpExecution(string $extension): bool
+    {
+        return !!\preg_match('/^\.?(php[0-9]*|phtml)$/i', $extension);
+    }
+
     /**
      * Forbid creation of FileUtil objects.
      */