check upload for double extensions is not working

  • yogitha
  • Topic Author
  • Offline
  • New Member
  • New Member
More
3 years 4 months ago #7095 by yogitha
Replied by yogitha on topic check upload for double extensions is not working
- Only logged in users can upload files.
- we are using fabrik. file upload will be using fabrik file upload element.
thank you for the support.
Regards
Praveen

Please Log in or Create an account to join the conversation.

More
3 years 4 months ago #7096 by Jose
Replied by Jose on topic check upload for double extensions is not working
Ok. Give me a couple of days to do some further investigation.

Regards,
Jose

Please Log in or Create an account to join the conversation.

  • yogitha
  • Topic Author
  • Offline
  • New Member
  • New Member
More
3 years 4 months ago #7097 by yogitha
Replied by yogitha on topic check upload for double extensions is not working
sure.
thank you very much. we will wait for your support.
regards,
Praveen

Please Log in or Create an account to join the conversation.

More
3 years 4 months ago #7098 by Jose
Replied by Jose on topic check upload for double extensions is not working
You're welcome!

One thing more: if only logged in users can post, do you get many spammers registered in your website or all the files are uploaded by "authorized" users? If there are spammers, are you using the "Spam protection" plugin?

Regards,
Jose

Please Log in or Create an account to join the conversation.

  • yogitha
  • Topic Author
  • Offline
  • New Member
  • New Member
More
3 years 3 months ago #7234 by yogitha
Replied by yogitha on topic check upload for double extensions is not working
we will wait for your support towards double extension of file upload and also how to prevent CSRF(Cross Site Request Forgery) Attacks.



Regards,
Yogitha

Please Log in or Create an account to join the conversation.

More
3 years 3 months ago #7235 by Jose
Replied by Jose on topic check upload for double extensions is not working
Hi Yogitha,

I'm ashamed; I completely forgot your case. Working on it now.

One thing more: if only logged in users can post, do you get many spammers registered in your website or all the files are uploaded by "authorized" users? If there are spammers, are you using the "Spam protection" plugin?

What about this?

Regarding to the csrf protection, every extension must add it. Does the audit warn about this?

Regards,
Jose

Please Log in or Create an account to join the conversation.

Time to create page: 0.169 seconds
Copyright © 2023 Securitycheck Extensions. All Rights Reserved.

This site is not affiliated with or endorsed by the Joomla! Project. It is not supported or warranted by the Joomla! Project or Open Source Matters. The Joomla! logo is used under a limited license granted by Open Source Matters, the trademark holder in the United States and other countries.

We may collect your IP address and your browser's User Agent string while using our site for security reasons. This information is retained only until we check you're not trying to hack our website.