The system should display a validation message and the file should not be uploaded.
The system is display a confirmation message and the file is uploaded.
PHP Built On Windows NT 6.2 build 9200
Database Version 5.6.12-log
Database Collation utf8_general_ci
PHP Version 5.4.12
Web Server Apache/2.4.4 (Win64) PHP/5.4.12
WebServer to PHP Interface apache2handler
Joomla! Version Joomla! 3.3.7-dev Development [ Ember ] 01-October-2014 02:00 GMT
Joomla! Platform Version Joomla Platform 13.1.0 Stable [ Curiosity ] 24-Apr-2013 00:00 GMT
User Agent Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0
Status | New | ⇒ | Confirmed |
I have just fixed the issues by making changes in admin part.
Go to Global configuration->media manager and then in legal extension remove the file type .txt
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.
I have tested the above issue by Making changes as (Go to Global configuration->media manager and then in legal extension remove the file type .txt), Still .txt file is uploaded.
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.
Kindly check once again. I retested the issue by removing the .txt in Global Configuration ->Media Manager -> Legal Extensions (File Types) . The .txt file was not uploaded this time. I get the message "This File type is not supported".
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.
Confirm that .txt file is uploaded. But I couldn't see it in Media Manager using image button below the article add content box. But the file was visible in CPanel File Manager. I received no success message but when I uploaded again, I did get an error message:
Error
File already exists
I have debug enabled - could the display of that, inside the media manager, be obfuscating some files in there?
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.
I removed both 'txt' and 'TXT' and I am NOT able to upload a txt file. I get the error: This file type is not supported.
@hils you wont see it in media manager because there is a defined filter of allowed image files but it is on the server
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.
I just tried using the editor in an article and got the same error. Notice
This file type is not supported.
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.
Confirmed upload txt-file. Also confirmed Notice after deleting filetype txt & TXT
This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.
I uploaded a text file from the frontend whilst editing an article as a publisher user.
In the media manager options in the backend I have the default setting.
fileinfo is running on my server so i guess the "Legal MIME Types" rules are taking precedence over "Legal Image Extensions (File Types)" rules
Problem for me is that its quite unclear what the intended behaviour of the system is. Some of the descriptions and tool tips are confusing.
Do the default setting need to be adjusted? (then update the sql that get loaded during installation)
What is the intended default behaviour for uploading txt files?
Also I just managed to uploaded a csv file from the frontend as a publisher after i had removed text/plain from the "Legal MIME Types" field making me think that neither "Legal MIME Types" or "Legal Image Extensions (File Types)" is being taken into account correctly
Hope that helps guys
Labels |
Added:
?
|
First of, to disallow txt-upload, both have to be removed, the txt-entry in the "Legal Extension (File Types)"-field and the text/plain entry in the "Legal MIME Types"-field.
Second: As far as I could see, there is no context-evaluation in the upload-method that would stop the code from uploading something else than the legal extenstions. Therefore it could be argued, that this is not a bug but simply not implemented.
Third: When I set the permissions for the given user in the media-options on "Access Administration Interface" => denied and "Create" => allowed, the behaviour seems to be the one intendet in this case (allowing only images)
I know its been a while but I am going to close this as expected behaviour. There are several slideshow type extensions which use this ability to add a text file that defines the slideshow. If we added txt to the list of files that can be uploaded then we break those extensions.
As stated above if you want to disable txt file upload on your own site then the functionality exists for you to do that.
Status | Confirmed | ⇒ | Closed |
Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2016-03-12 10:47:07 |
Closed_By | ⇒ | brianteeman |
confirmed