[TYPO3] does tt news accept exe and php (malicious) mime types ?

[Daniel Selinger]

Hi Dave,

usually it should be forbidden by default in the install tool.

Greetz
Ling


2007/6/13, dave typo <typothree at gmail.com>:
>
> Could a user potentially upload an exe file or a php file using
> ttnews' file attachment property?
>
> ie: should I be concerned with malicious mime types being attached to
> a news file?
>
> I ask because I am trying to impliment a front-end news uploader
> extension, and was wondering if I need to put this feature into the
> extension...
>
>
> thanks,
>
> -Dave
> _______________________________________________
> TYPO3-english mailing list
> TYPO3-english at lists.netfielders.de
> http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-english
>