This forum is a community forum meant for users of the plugin to collaborate and help solve issues with implementation, etc. Unfortunately, as the creator of the plugin, I do not have much time to attend to every request here as this is only a side project and I must work a full-time job to provide for my family. This is how I keep the Flash version free and the HTML5 version low cost.
UploadiFive 1.1.1 has been released which includes a small fix for added support on touch devices including iOS 6 devices.
Protection of fileExt
  • dlg74dlg74
    Hi,
    Sorry but my english is not perfect.
    Even if you have file extension limitation, you can write *.* or *.doc or *.php next to the name of the file and you will choose and upload all the type of file. It's dangerous because you can upload *.exe, *.php
    my code : 'fileExt' : '*.jpg',





  • TravisN.TravisN.
    The fileExt setting is a simply a filter provided by flash. You still need to add file type protection within your upload script.
  • mamelochemameloche
    Just repeating what was said earlier: with the basic uploadify.php file, if someone wants they could upload "jpg.php" and it would pass through the filter.

    All you need to do to fix this and stop a lot of trouble for newbs is to to change to
    $fileParts = pathinfo($_FILES['Filedata']['name'],PATHINFO_EXTENSION);
Add a Comment