37 lines
659 B
PHP
37 lines
659 B
PHP
<?php
|
|
require __DIR__ . '/auth.php';
|
|
require_login();
|
|
|
|
$uploadDir = __DIR__ . '/uploads';
|
|
|
|
$name = $_POST['name'] ?? '';
|
|
if ($name === '') {
|
|
http_response_code(400);
|
|
echo '缺少文件名';
|
|
exit;
|
|
}
|
|
|
|
$name = basename($name);
|
|
$path = $uploadDir . '/' . $name;
|
|
|
|
$real = realpath($path);
|
|
$base = realpath($uploadDir);
|
|
|
|
if ($real === false || $base === false || strpos($real, $base) !== 0) {
|
|
http_response_code(404);
|
|
echo '文件不存在';
|
|
exit;
|
|
}
|
|
|
|
if (!is_file($real)) {
|
|
http_response_code(404);
|
|
echo '不是文件';
|
|
exit;
|
|
}
|
|
|
|
if (unlink($real)) {
|
|
echo 'OK';
|
|
} else {
|
|
http_response_code(500);
|
|
echo '删除失败';
|
|
} |