Merge pull request #300 from WPUserManager/upload-fix

Upload fix

Author: polevaultweb

includes/functions.php

@@ -502,7 +502,8 @@ function wpum_send_registration_admin_email( $user ) {
  * Prepare file information for upload.
  *
  * @param array $file_data
- * @return void
+ *
+ * @return array
  */
 function wpum_prepare_uploaded_files( $file_data ) {
 	$files_to_upload = array();
@@ -524,6 +525,7 @@ function wpum_prepare_uploaded_files( $file_data ) {
 		$file_data['type'] = $type['type'];
 		$files_to_upload[] = $file_data;
 	}
+
 	return apply_filters( 'wpum_prepare_uploaded_files', $files_to_upload );
 }
 
@@ -561,6 +563,11 @@ function wpum_upload_file( $file, $args = array() ) {
 		return $file;
 	}
 
+	$check = wp_check_filetype_and_ext( $file['tmp_name'], $file['name'] );
+	if ( ! $check['ext'] || ! $check['type'] ) {
+		return new WP_Error( 'upload', __( 'Sorry, you are not allowed to upload this file type.' ) );
+	}
+
 	if ( ! in_array( $file['type'], $allowed_mime_types ) ) {
 		if ( $args['file_label'] ) {
 			return new WP_Error( 'upload', sprintf( __( '"%1$s" (filetype %2$s) needs to be one of the following file types: %3$s', 'wp-user-manager' ), $args['file_label'], $file['type'], implode( ', ', array_keys( $allowed_mime_types ) ) ) );