Feeling Lucky
?
[#10762] - Matching file extension
- Closed
- 3 Aug 2016
- Medium
- Build: master
- # 10762
Steps to reproduce the issue
Allowing "zip" extension in parameters of media manager
Uploading file: "name of program ver1.0.11.exe.zip" - FAIL. Work ONLY if I also allow extensions .exe .11 .0
Expected result
System checks only last extension of file
Actual result
System information (as much as possible)
Additional comments
| Status | New | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2016-08-03 10:42:56 |
| Closed_By | ⇒ | brianteeman |
brianteeman
- comment
- 3 Aug 2016
Closed
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/10762.
It's a security feature not a bug. But I think it's an annoying feature, too.
When a filename contains one of these file extensions with a leading dot somewhere(!) upload will be blocked at the latest here:
https://github.com/joomla/joomla-cms/blob/staging/libraries/cms/helper/media.php#L93-L96
That's the case with ver.exe.zip but also ver.exe.quack.copy.zip
BTW: When I use uppercase .EXE.zip I can upload.
EDIT: Files like ver.php.zip are blocked somewhere else (don't know where). Thus it makes no sense to change only behavior of above mentioned lines.