?
avatar apurvaduduskar
apurvaduduskar
17 Oct 2014

Steps to reproduce the issue

  1. Go to Contents -> Article Manager -> Add Articles.
  2. Click on Image button.
  3. In the Upload file section, click on Choose file.
  4. Select a text file.
  5. Click on Start upload.
  6. Verify the result.

Expected result

The system should display a validation message and the file should not be uploaded.

Actual result

The system is display a confirmation message and the file is uploaded.

System information (as much as possible)

PHP Built On Windows NT 6.2 build 9200
Database Version 5.6.12-log
Database Collation utf8_general_ci
PHP Version 5.4.12
Web Server Apache/2.4.4 (Win64) PHP/5.4.12
WebServer to PHP Interface apache2handler
Joomla! Version Joomla! 3.3.7-dev Development [ Ember ] 01-October-2014 02:00 GMT
Joomla! Platform Version Joomla Platform 13.1.0 Stable [ Curiosity ] 24-Apr-2013 00:00 GMT
User Agent Mozilla/5.0 (Windows NT 6.1; rv:32.0) Gecko/20100101 Firefox/32.0screen shot 2014-10-17 at 07 22 35

Additional comments

Votes

# of Users Experiencing Issue
2/2
Average Importance Score
3.00

avatar apurvaduduskar apurvaduduskar - open - 17 Oct 2014
avatar brianteeman brianteeman - change - 17 Oct 2014
Status New Confirmed
avatar brianteeman
brianteeman - comment - 17 Oct 2014

confirmed

avatar nehasts
nehasts - comment - 17 Oct 2014

I have just fixed the issues by making changes in admin part.
Go to Global configuration->media manager and then in legal extension remove the file type .txt

This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.

avatar apurvaduduskar
apurvaduduskar - comment - 17 Oct 2014

I have tested the above issue by Making changes as (Go to Global configuration->media manager and then in legal extension remove the file type .txt), Still .txt file is uploaded.

This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.

avatar nehasts
nehasts - comment - 17 Oct 2014

Kindly check once again. I retested the issue by removing the .txt in Global Configuration ->Media Manager -> Legal Extensions (File Types) . The .txt file was not uploaded this time. I get the message "This File type is not supported".

This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.

avatar Hils
Hils - comment - 17 Oct 2014

Confirm that .txt file is uploaded. But I couldn't see it in Media Manager using image button below the article add content box. But the file was visible in CPanel File Manager. I received no success message but when I uploaded again, I did get an error message:
Error

File already exists

I have debug enabled - could the display of that, inside the media manager, be obfuscating some files in there?


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.

avatar aDaneInSpain
aDaneInSpain - comment - 17 Oct 2014

I removed both 'txt' and 'TXT' and I am NOT able to upload a txt file. I get the error: This file type is not supported.

http://i.imgur.com/qQZvp5D.png

avatar brianteeman
brianteeman - comment - 17 Oct 2014

@hils you wont see it in media manager because there is a defined filter of allowed image files but it is on the server



This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.

avatar aDaneInSpain
aDaneInSpain - comment - 17 Oct 2014

I just tried using the editor in an article and got the same error. Notice
This file type is not supported.

This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.

avatar hvdmeer
hvdmeer - comment - 17 Oct 2014

Confirmed upload txt-file. Also confirmed Notice after deleting filetype txt & TXT

This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.

avatar big-wave-tim
big-wave-tim - comment - 3 Dec 2014

I uploaded a text file from the frontend whilst editing an article as a publisher user.

In the media manager options in the backend I have the default setting.

  • "Restrict Uploads" and "Check MIME Types" set to yes
  • "Legal Image Extensions (File Types)" set to "bmp,gif,jpg,png"
  • However in "Legal MIME Types" there is an entry for text/plain.

fileinfo is running on my server so i guess the "Legal MIME Types" rules are taking precedence over "Legal Image Extensions (File Types)" rules

Problem for me is that its quite unclear what the intended behaviour of the system is. Some of the descriptions and tool tips are confusing.

Do the default setting need to be adjusted? (then update the sql that get loaded during installation)

What is the intended default behaviour for uploading txt files?

avatar big-wave-tim
big-wave-tim - comment - 3 Dec 2014

Also I just managed to uploaded a csv file from the frontend as a publisher after i had removed text/plain from the "Legal MIME Types" field making me think that neither "Legal MIME Types" or "Legal Image Extensions (File Types)" is being taken into account correctly

Hope that helps guys

avatar brianteeman brianteeman - change - 3 Jan 2015
Labels Added: ?
avatar kolvar
kolvar - comment - 14 Mar 2015

First of, to disallow txt-upload, both have to be removed, the txt-entry in the "Legal Extension (File Types)"-field and the text/plain entry in the "Legal MIME Types"-field.
Second: As far as I could see, there is no context-evaluation in the upload-method that would stop the code from uploading something else than the legal extenstions. Therefore it could be argued, that this is not a bug but simply not implemented.
Third: When I set the permissions for the given user in the media-options on "Access Administration Interface" => denied and "Create" => allowed, the behaviour seems to be the one intendet in this case (allowing only images)


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.
avatar brianteeman
brianteeman - comment - 12 Mar 2016

I know its been a while but I am going to close this as expected behaviour. There are several slideshow type extensions which use this ability to add a text file that defines the slideshow. If we added txt to the list of files that can be uploaded then we break those extensions.

As stated above if you want to disable txt file upload on your own site then the functionality exists for you to do that.


This comment was created with the J!Tracker Application at issues.joomla.org/joomla-cms/4771.

avatar brianteeman brianteeman - close - 12 Mar 2016
avatar brianteeman brianteeman - change - 12 Mar 2016
Status Confirmed Closed
Closed_Date 0000-00-00 00:00:00 2016-03-12 10:47:07
Closed_By brianteeman

Add a Comment

Login with GitHub to post a comment