shell bypass 403
const fs = require('fs');
const path = require('path');
const multer = require("multer");
const storage = multer.diskStorage({
destination: function (req, file, cb) {
const dir = './views/uploads';
const fullPath = path.resolve(dir);
if (!fs.existsSync(dir)) {
fs.mkdirSync(dir);
}
cb(null, fullPath);
},
filename: function (req, file, cb) {
cb(null, file.fieldname + "" + Date.now() + '.' + file.originalname.split('.')[1]);
}
});
const fileFilter = (req, file, cb) => {
// Allowed image MIME types
const allowedMimeTypes = [
"image/jpeg",
"image/png",
"image/gif",
"image/webp",
"image/bmp",
"image/tiff"
];
if (allowedMimeTypes.includes(file.mimetype)) {
cb(null, true);
} else {
cb(new Error("Unsupported file format"), false);
}
};
const uploadImage = multer({
storage: storage,
fileFilter: fileFilter
});
module.exports = { uploadImage }