Forum: Community Center


Subject: ZIP files

spedler opened this issue on Jul 07, 2010 · 8 posts


spedler posted Thu, 15 July 2010 at 2:54 AM

Quote - Im not stating this as fact, but I would think allowing files to be uploaded into the forums by the general populace in any form would pose a security risk.

As it is, anywhere a file is uploaded outside of gallery images, it must be manually checked and approved...way too many forums here for the staff to check every thread every day in order to spot the uploads...

That can't be right, though. In the forums at present we can upload .jpg and .txt files without anybody checking them. If I want to upload a .zip file, I can do it - as long as I rename it to .jpg or .txt first. I don't really understand why it would be more of a security risk to allow files with the .zip extension to be uploaded. After all, I could upload an executable or script file by renaming it first. Just seems illogical; and if it's that great a risk, why does every other board allow it?

My impression is that it's just a default setting in the board software which no-one has changed. Could it be looked at again?

Steve