Agaric Design Collective

Agaric wants Drupal to upload files with any or no extension and stop being a pain about it

By Benjamin Melançon
on 13 Oct
1 comment

Key words and phrases

drupal allow upload of files with no extension

Tags

Description

Agaric is not alone: Allow any files to be uploaded or make "Permitted upload file extensions" a required field

The workaround of adding the file name to the "extension" list didn't work for us though for a file called "Capfile" (with no extension, of course).

Adding a .txt extension to the file for now. But may I say: annoying!

 

I can see how this could be

I can see how this could be a security concern in some cases, but letting people upload files to begin with is a security risk, considering that malicious code can easily be saved within pictures....

anyway, it should be a role thing, if you are an admin, you should be able to upload whatever you want. I mean, c'mon if you have the ability to change themes and delete users, I think the system should trust you enough to let you upload whatever you want.

Posted by Dan Hakimzadeh on Tue, 2008-10-14 15:03
Post new comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd> <blockquote> <h1> <h2> <h3> <h4> <h5> <h6> <small> <pre> <strike> <sub> <sup> <kbd> <s>
  • Lines and paragraphs break automatically.
  • Web page addresses and e-mail addresses turn into links automatically.
  • You may post code using <code>...</code> (generic) or <?php ... ?> (highlighted PHP) tags.

More information about formatting options

CAPTCHA
This question is for testing whether you are a human visitor and to prevent automated spam submissions.
Image CAPTCHA
Copy the characters (respecting upper/lower case) from the image.