Bug #64621
closed
FAL relation could be created even if the filetype is not allowed for the TCA field
100%
Description
It is possible to create a FAL file relation even if the file extension is not allowed for this field.
Reproduce:- Create a new image element
- Modify the "Add Image" button (using firebug e.g.) from something like
setFormValueOpenBrowser('file', '|||gif,jpg,jpeg,tif,tiff,bmp,pcx,tga,png,pdf,ai|data-38-tt_content-173-image-sys_file_reference|inline.checkUniqueElement||inline.importElement'); return false;
tosetFormValueOpenBrowser('file', '||||data-38-tt_content-173-image-sys_file_reference|inline.checkUniqueElement||inline.importElement'); return false; - Click on open Image. You'll now be able to select any kind of file.
- select a non image file
- The file is visually added to the content element
- Save the record
Result:
You won't see that the records has been added what is the expected behavior.
But it is added. The relation is created in the database but not displayed in TCA as the file extension is not allowed.
Expected Result:
The relation should never be created by checking the file extension before creating the relation.
Updated by Sascha Egerer over 9 years ago
It looks like this is only possible for Admins. Maybe it is related to #64619
Updated by
Updated by Armin Vieweg over 9 years ago
The relation is created in the database but not displayed in TCA as the file extension is not allowed.
The relation is created, but got deleted=1.
Updated by Sascha Egerer over 9 years ago
Armin Ruediger Vieweg wrote:
The relation is created in the database but not displayed in TCA as the file extension is not allowed.
The relation is created, but got deleted=1.
Ok. But it should not be created anyway...
Updated by Armin Vieweg over 9 years ago
But you are able to undelete the relation. It will not displayed in backend, but it is still there. Even updating the record, even changing other relations, have no effect to the undeleted relation.
Updated by Sascha Egerer over 9 years ago
- Status changed from Accepted to In Progress
Updated by Gerrit Code Review over 9 years ago
- Status changed from In Progress to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/36496
Updated by Gerrit Code Review over 9 years ago
Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/36496
Updated by Gerrit Code Review over 9 years ago
Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/36496
Updated by Gerrit Code Review over 9 years ago
Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/36496
Updated by Gerrit Code Review over 9 years ago
Patch set 5 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/36496
Updated by Gerrit Code Review over 9 years ago
Patch set 6 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/36496
Updated by Gerrit Code Review over 9 years ago
Patch set 7 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/36496
Updated by Armin Vieweg over 9 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset ec052814fdb821a65b562668d57e889c5302fc62.
Updated by Anja Leichsenring over 8 years ago
- Sprint Focus deleted (
On Location Sprint)
Updated by Benni Mack almost 6 years ago
- Status changed from Resolved to Closed