[RoarCTF2019]SimpleUpload

<?php

namespace Home\Controller;

use Think\Controller;

class IndexController extends Controller

{

    public function index()

    {

        show_source(__FILE__);

    }

    public function upload()

    {

        $uploadFile = $_FILES['file'] ;

        if (strstr(strtolower($uploadFile['name']), ".php") ) {

            return false;

        }

        $upload = new \Think\Upload();// 实例化上传类

        $upload->maxSize  = 4096 ;// 设置附件上传大小

        $upload->allowExts  = array('jpg', 'gif', 'png', 'jpeg');// 设置附件上传类型

        $upload->rootPath = './Public/Uploads/';// 设置附件上传目录

        $upload->savePath = '';// 设置附件上传子目录

        $info = $upload->upload() ;

        if(!$info) {// 上传错误提示错误信息

          $this->error($upload->getError());

          return;

        }else{// 上传成功 获取上传文件信息

          $url = __ROOT__.substr($upload->rootPath,1).$info['file']['savepath'].$info['file']['savename'] ;

          echo json_encode(array("url"=>$url,"success"=>1));

        }

    }

}