• View
• Edit
• History
• Attach
• Print

00687: able to upload files with blocked extension

Description: Without having altered the default 'accepted' file extension list for uploads, PmWiki allowed me to upload a .exe file.

This is technically not a bug -- it's by design. When uploads were introduced there were a large number of people who felt that it was important to have '.exe' uploads enabled by default. (I disagreed, but bowed to the desires of the majority.)

.exe uploads can be disabled by setting $UploadExtSize['exe']=0;.

Pm