file uploading not to check extensions
Bug #553887 reported by
cpc
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| Jisko |
Fix Released
|
High
|
Marcos Garcia | ||
Bug Description
Jisko 3.0 beta1 rev 374
when uploading a file which has the denied-extension specified in the config.php (such as .exe), it successful without any prompt.
It's about security issue, if someone upload a harmful file.
| visibility: | private → public |
| Changed in jisko: | |
| milestone: | none → 3.0beta1 |
| assignee: | nobody → Marcos Garcia (marcosgdf) |
| status: | New → Confirmed |
| importance: | Undecided → High |
| status: | Confirmed → In Progress |
Revision history for this message
| Marcos Garcia (marcosgdf) wrote | #1 |
| Changed in jisko: | |
| status: | In Progress → Fix Released |
To post a comment you must log in.
Fixed in last revision