[TYPO3] does tt news accept exe and php (malicious) mime types ?

dave typo typothree at gmail.com
Wed Jun 13 16:15:04 CEST 2007


Could a user potentially upload an exe file or a php file using
ttnews' file attachment property?

ie: should I be concerned with malicious mime types being attached to
a news file?

I ask because I am trying to impliment a front-end news uploader
extension, and was wondering if I need to put this feature into the
extension...


thanks,

-Dave


More information about the TYPO3-english mailing list