qakcn / qchan Goto Github PK

Hello maintainer(s),

I am a security researcher from the Institute of Application Security at TU Braunschweig, Germany. We discovered a (potential) security vulnerability in your project.

We would like to report this vulnerability to you in a responsible and ethical manner.
Therefore, we do not want to disclose any details of the vulnerability publicly until you have had a chance to review and fix it.

Could you please let us know your prefered way of receiving security reports?

You can contact us at [email protected] or by replying to this issue.

Thank you for your attention and cooperation.

1，加入七牛云 SDK 实现CDN存储图片；
2，前台加入验证码或后台加入 ban ip功能防止Spam。

刚才想用手机传图来着 尴尬了

iPhone6

是否考虑对前端进行更新优化呢？
推荐百度的 https://github.com/fex-team/webuploader ，现成的轮子。

Hey there!

I'd like to report a security issue but cannot find contact instructions on your repository.

If not a hassle, might you kindly add a SECURITY.md file with an email, or another contact method? GitHub recommends this best practice to ensure security issues are responsibly disclosed, and it would serve as a simple instruction for security researchers in the future.

Thank you for your consideration, and I look forward to hearing from you!

(cc @huntr-helper)

请问
我应该修改哪个文件实现上传随机重命名？

如题

我去qchan的http://tuchuang.org/ 上面看了一下，发现我上传上去的图片会按照MD5修改文件名，请问这个是怎么做到的。

若安装到二级目录（如http://www.xxx.com/image/），在管理后台选择某个月份后显示的图片缩略图返回 HTTP 404（http://www.xxx.com/thumbs/）。

config.php中的配置具体要怎样修改？

上传之后那个 "+" 就消失了,然后啥都没了.

如标题。