Warning: Undefined variable $UploadMaxSize in /home/kongdmdu/pmichaud/pmwiki/local/PITS.php on line 8

Warning: Undefined variable $UploadMaxSize in /home/kongdmdu/pmichaud/pmwiki/local/PITS.php on line 9

Warning: Undefined variable $UploadMaxSize in /home/kongdmdu/pmichaud/pmwiki/local/PITS.php on line 10

Warning: Undefined variable $UploadMaxSize in /home/kongdmdu/pmichaud/pmwiki/local/PITS.php on line 11

Warning: Undefined array key "pmwiki" in /home/kongdmdu/pmichaud/pmwiki/pub/skins/vector/vector.php on line 14

Deprecated: preg_replace(): Passing null to parameter #3 ($subject) of type array|string is deprecated in /home/kongdmdu/pmichaud/pmwiki/pub/skins/vector/vector.php on line 14

Warning: Undefined array key "pagename" in /home/kongdmdu/pmichaud/pmwiki/pub/skins/vector/vector.php on line 225

Warning: Undefined array key "pagename" in /home/kongdmdu/pmichaud/pmwiki/pub/skins/vector/vector.php on line 253
00687: able to upload files with blocked extension - PITS - PmWiki

00687: able to upload files with blocked extension

Summary: able to upload files with blocked extension
Created: 2006-03-05 10:06
Status: Closed - not a bug
Category: Bug
From: iofreak
Assigned:
Priority: 5
Version: 2.1.beta15-34
OS: FreeBSD/Apache/4.3.11

Description: Without having altered the default 'accepted' file extension list for uploads, PmWiki allowed me to upload a .exe file.

This is technically not a bug -- it's by design. When uploads were introduced there were a large number of people who felt that it was important to have '.exe' uploads enabled by default. (I disagreed, but bowed to the desires of the majority.)

.exe uploads can be disabled by setting $UploadExtSize['exe']=0;.

Pm