XOOPS 
Forum
Forum Index General Forums Community Support Modules Support Themes Support Development International Support Module Hack Reviews Theme Designer Talk
  1. Board index / 
  2. XOOPS Modules Support forums / 
  3. Module usage questions 
  4.  / NEWBB2 - attaching files to postings via upload is it secure?
Register
1
domineaux
NEWBB2 - attaching files to postings via upload is it secure?

  • 2005/2/4 18:46

  • domineaux

  • Quite a regular

  • Posts: 389

  • Since: 2002/9/29


In the NEWBB2

I've disabled the ability of registered user from attaching files to their postings. I'm not sure what kind of security issues it provides for ner-do-wells.

I'd like to enable the function on some boards since it would be something extra to encourage board use. This way I might build traffic a little faster on the boards.

I'd like to read just how the attached file function works, and benefits.
2
DonXoop
Re: NEWBB2 - attaching files to postings via upload is it secure?

You have the ability to define the file extentions allowed. So the file is as secure as what type of file you allow. It is likely no more dangerous (and maybe more secure) than an external link to a file that could be put in already. The attached file can't be executed by the server.

Most common use is to attach a picture and stop the "how do I post a picture" post. Be very selective for other file types.
3
domineaux
Re: NEWBB2 - attaching files to postings via upload is it secure?

  • 2005/2/4 19:11

  • domineaux

  • Quite a regular

  • Posts: 389

  • Since: 2002/9/29


DonXoop

I allow PNG/GIF/JPG & ZIP/TAR/RAR files only for uploading files...For WF-DOWNLOADS.

I guess this is what you mean, do you see anything wrong with the above?

Login

Register now!  |  Lost Password?

Search

Advanced Search

Recent Posts

Who's Online

146 user(s) are online (72 user(s) are browsing Support Forums)

Members: 0

Guests: 146

more...

Donat-O-Meter

Stats
Goal: $100.00
Due Date: May 31
Gross Amount: $0.00
Net Balance: $0.00
Left to go: $100.00
Make donations with PayPal!

Latest GitHub Commits