It is a security issue. Simply enable the rename in tfu_config.php.
And it is for sure not silly that the default configuration is safe
.- Michael
| Php photo gallery TWG | JFUploader | TWG Flash upload | WFU | Forum https://www.tinywebgallery.com/forum/ |
|
| Rename File Extension (Urgent) https://www.tinywebgallery.com/forum/viewtopic.php?f=15&t=2958 |
Page 1 of 1 |
| Author: | Mantis [ 9. Apr 2011, 19:07 ] |
| Post subject: | Rename File Extension (Urgent) |
Why am I not being allowed to do this? I know it might be perceived as a security risk but I am the only administrator. It is a necessity for me right now, because my computer is broken and I need to upload some files. Some are .php but it just uploads them without an extension. I cannot connect via FTP because my host will only let specific IPs connect to my server. This uploader is my only hope, and it is silly that it isn't letting me do this. |
|
| Author: | TinyWebGallery [ 9. Apr 2011, 21:52 ] |
| Post subject: | Re: Rename File Extension (Urgent) |
It is a security issue. Simply enable the rename in tfu_config.php. And it is for sure not silly that the default configuration is safe .- Michael |
|
| Author: | Mantis [ 10. Apr 2011, 01:13 ] |
| Post subject: | Re: Rename File Extension (Urgent) |
Thanks, that did the trick. I'll disable renaming soon as I know it is a security risk. 
|
|
| Author: | TinyWebGallery [ 10. Apr 2011, 01:16 ] |
| Post subject: | Re: Rename File Extension (Urgent) |
It's not a risk if you are the only user - but if you e.g. use it in the site and someone you might don't trust that much uploads a file with an allowed extension - renames it to php and then kills your webspace... - Michael |
|
| Page 1 of 1 | All times are UTC + 1 hour [ DST ] |
| Powered by phpBB® Forum Software © phpBB Group http://www.phpbb.com/ |
|