Printable View
With the new uber-uploader progress bar it stops anyone uploading files with spaces in or other chars such as ' [] etc. it also has a 32 letter filename limit.
you can turn off this annoying feature by editing /include/settings/uu_conlib.php and changing "check_file_name_format" to
$check_file_name_format = 0;
Amazing. 1000 thank yous.
Leki,
Great for stopping the no space issue, but by turning off the format type this allows people to upload any file type, and could cause serious issues, including PHP attacks etc.
I've just uploaded a JPG file to SportGamingTv.com as an example.... For security purposes I wouldn't advise anyone to do this.
Fixes one problem but opens up 100 problems.
Regards,
Mat.
Hi Galnet
This is not the case, php and other files that could cause harm are disallowed in the uber-uploader config. see uu_default_config.pm:
disallow_extensions => '(sh|php|php3|php4|php5|py|shtml|phtml|cgi|pl|plx| htaccess|htpasswd)',
also jpg uploads are allowed by default by all vshare users....if you dont want that though you could add it to the above.
so everyone you are safe to do this
Thanks again, to both of you. I expanded my uu_default_config.pm to also include jpg, jpeg, png, gif and exe. I'll add more to this list as I notice things being a problem.
Uploading video with .exe extension ?
Anyway allowing .exe upload is not good as abusers upload virus, then send spam, for this reason, most free services do not allow .exe file uploads.
Sorry, I meant that I added those to the list of file extensions that are not allowed. :)
disallow_extensions => '(sh|php|php3|php4|php5|py|shtml|phtml|cgi|pl|plx| htaccess|htpasswd|exe|jpg|jpeg|gif|png)',
iwould also add asp, jv, html, htm
Just upgraded to 2.7 from 2.6. Attempting to upload files now gets a warning about too many characters. Moving the file to the desktop which means there are less subdirectory paths fixes this problem but then the complaint is that I have invalid characters.
I think the / characters in the path to the file are not being ignored in the valid character checking.
Where is this and maybe I have something else I missed when setting up the progress bar upload?
Tks Dave