uploading files with multiple dots

  • Resolved JPPC

    (@gfts)


    7 years, 4 months ago

    We are using your plugin and love it. We loved it so much we even paid for it. Great work!

    We have an issue that we didn’t really notice until someone uploading found by accident.

    When we set up the form, We had changed the settings so that we allow multiple periods (dots). That works great.

    BUT if we upload a file with one character between 2 periods we run into trouble. so a file named “filename.A.jpg” it will not upload. BUT “filename.1.jpg” does work! the extension doesn’t matter as long as it is in the allowed extension list.

    Also it is worth noting that a file named “filename.FF.txt” will work, but get renamed to “filename.FF_.txt”. this is no problem. obviously that is built into the code to do that.

    So the question is, can we allow for one character to be between two dots to not error and get uploaded? if not, please let me know and we will just state it on the instructions. the odds of it happening are rare, but looking to make things easy for everyone.

    Alexander

Viewing 8 replies - 1 through 8 (of 8 total)
  • Plugin Author nickboss

    (@nickboss)

    Hi, what settings did you change to make it work with multiple dots?

    Regards

    Nickolas

    Thread Starter JPPC

    (@gfts)

    i found a topic on here at said add this line to my functions.php

    if ( isset($GLOBALS[“WFU_GLOBALS”][“WFU_WILDCARD_ASTERISK_MODE”]) ) $GLOBALS[“WFU_GLOBALS”][“WFU_WILDCARD_ASTERISK_MODE”][3] = “loose”;

    at the time I had the free version, but have since upgraded to PRO

    Plugin Author nickboss

    (@nickboss)

    This will work for Pro as well. Have you made any changes to the shortcode?

    Nickolas

    Thread Starter JPPC

    (@gfts)

    yes this works for uploading files with multiple dots, and not i did not make any changes.

    what about the issue for filenames with one letter between 2 dots? (example “filename.A.jpg”) why doesn’t this work? but “filename.AA.jpg” will work.

    Plugin Author nickboss

    (@nickboss)

    Please send me the shortcode to check

    Nickolas

    Thread Starter JPPC

    (@gfts)

    i removed my e-mail for spam purposes…

    [wordpress_file_upload uploadpath=”churchuploads” fitmode=”responsive” uploadpatterns=”*.7z, *.ai, *.bmp, *.cpt, *.dcs, *.doc, *.docx, *.eps, *.gif, *.gz, *.indd, *.jpeg, *.jpg, *.p65, *.pcx, *.pdf, *.pm6, *.pmd, *.png, *.ps, *.psd, *.psp, *.pt5, *.pub, *.qxd, *.sit, *.tar, *.tga, *.tif, *.txt, *.wpd, *.xls, *.xlsx, *.zip” maxsize=”99″ duplicatespolicy=”maintain both” uniquepattern=”datetimestamp” placements=”userdata/selectbutton/filelist/uploadbutton/message” uploadtitle=”” selectbutton=”SELECT FILE/SELECT FILES” uploadbutton=”UPLOAD FILE/UPLOAD FILES” successmessage=”%filename% uploaded successfully!” warningmessage=”%filename% uploaded successfully but with warnings.” errormessage=”%filename% not uploaded. Please contact your Bulletin Rep.” waitmessage=”%filename% is being uploaded. Please wait a moment.” requiredlabel=”” notify=”true” notifyrecipients=”[email protected]” notifysubject=”File Upload Notification %userdata1%” notifymessage=”This is an automatic delivery message to notify you that a new file has been uploaded by Church #%userdata1%. %n%%n%File uploaded: %filename%%n%” successmessagecolor=”#FF0000″ widths=”userdata_label:80px, userdata_value:40px” userdata=”true” userdatalabel=”CHURCH #|t:number|s:left|r:1|a:0|v:1|h:1|p:inline|d:|f:d” css=”div.file_filelist {width: 500px;}%n%label.file_filelist_filelabel_label0 {font-size: 16px;}%n%label.file_messageblock_fileheader_label {font-size: 16px;}%n%label.file_messageblock_header_label {font-size: 16px;}%n%label.file_filelist_filelabel_label {font-size: 16px;}%n%input%brl%type=%dq%button%dq%%brr%, input, textarea, select {font-size: 16px; font-weight:bold;}”]

    Plugin Author nickboss

    (@nickboss)

    When you have a filename with more than one dots, then the security algorithm of the plugin will consider that the file has a double extension. So file filename.A.jpg has two extensions, ‘jpg’ and ‘A’. The plugin will check both if they are blacklisted. Extension ‘A’ is blacklisted, so is ‘AAA’, but ‘AA’ is not. The list of blacklisted extensions (more than 2500) has been generated after a very thorough analysis of all existing extensions (approx. 50000 extensions).

    If you do not want the algorithm to check both extensions but only the last one, I can propose a workaround.

    Nickolas

    Thread Starter JPPC

    (@gfts)

    thank you. we will be fine the way it is. it is very rare someone would do this. thank you for looking into the issue. We are very happy with the plugin.

Viewing 8 replies - 1 through 8 (of 8 total)
  • The topic ‘uploading files with multiple dots’ is closed to new replies.