[TYPO3] does tt news accept exe and php (malicious) mime types ?
dave typo
typothree at gmail.com
Wed Jun 13 16:15:04 CEST 2007
Could a user potentially upload an exe file or a php file using
ttnews' file attachment property?
ie: should I be concerned with malicious mime types being attached to
a news file?
I ask because I am trying to impliment a front-end news uploader
extension, and was wondering if I need to put this feature into the
extension...
thanks,
-Dave
More information about the TYPO3-english
mailing list