蓝海豚团购导航 V4.0.4 没修复上传漏洞

editor\upload.php：

<?php
define('IN_PHPUP',1);
define('ROOT_PATH',dirname(dirname(__FILE__)));
$root=str_replace('editor/upload.php','',$_SERVER['PHP_SELF']);

$uploaddir='data/upload/'.date('Y').'/'.date('m');

if($_FILES)
{
        include "../inc/global.func.php";
        $file=_upload('file1','../'.$uploaddir);

function _upload($upfile,$uploaddir='',$customfile='',$thumbinfo=array())
{
        include ROOT_PATH.'/inc/upload.class.php';
        $up=new upload($upfile);

if(!defined('IN_PHPUP')) {
        exit('Access Denied');
}
class upload
{
        var $stuffix=array('image/jpg','image/gif','image/png','image/x-png',"image/pjpeg","image/jpeg","application/x-zip-compressed","application/x-shockwave-flash");
//省一堆代码......
        //检查文件类型
        function checkType()
        {
                if(!empty($_FILES[$this->handle]['type']) && in_array(strtolower($_FILES[$this->handle]['type']),$this->stuffix))
                       //in_array(strtolower($_FILES[$this->handle]['type']),$this->stuffix))  //还是以前那漏洞直接秒杀
                {
                        $this->error.="";
                }
                else
                {
                        $this->error.="不允许上传的文件类型\n".strtolower($_FILES[$this->handle]['type']);
                }
        }