Project

General

Profile

Actions

Bug #14382

closed

Fileadmin doesn't accept extensions .php .php3

Added by old_ehontheim about 20 years ago. Updated about 20 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Backend API
Target version:
-
Start date:
2004-11-11
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
3.7.0
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

The file list module doesn't allow to create/upload files with the extensions .php .php3. Extension .txt will be accepted (and can be used instead).
Probably just a minor bug, but a hurdle for newbees following the ModernTemplateBuildingGuide

Version 3.6 as well as 3.7

see threads:
http://typo3.org/documentation/mailing-lists/english-main-list-archive/thread/62529/

http://typo3.org/documentation/mailing-lists/english-main-list-archive/thread/110099016
(issue imported from #M483)

Actions #1

Updated by Ingmar Schlecht about 20 years ago

This is not a bug, it's a feature!

In most cases you can use use .txt or .inc instead of .php or .php3 or whatever for PHP files which are just included by TYPO3 and not executed as a stand-alone script.

However, you can't write stand-alone PHP files with the filelist module which would really be a security risk if it were possible!

Anyone who has access to the fileadmin could then destroy your whole TYPO3 website and spy out your database password and do basically everything PHP can do.

So I'm glad TYPO3 doesn't allow the creation of those dangerous filetypes by default.

Closing this bug.

Actions

Also available in: Atom PDF