Discussion:
[Typo3] Enabling PHP file Extensions
Miller, Eric A.
2005-04-07 19:13:06 UTC
Permalink
Typo3 says that it allows PHP file extension files to be created or
uploaded to FileAdmin directory, but when I create or attempt an upload
it says Filetyle "php" not allowed.

Anyone else run into this problem ?

Eric Miller
Web Systems Engineer
Creighton University

Office: 402.280.3933
Cell: 402.740.2518

----------------------------------------
"A conservative is a man who believes that nothing should be done for
the first time." ~ Alfred E. Wiggam
----------------------------------------
srank
2005-04-07 19:20:57 UTC
Permalink
That's for your own security. But if you call the file-extension maybe
.tmpl the php-file is also running!
Post by Miller, Eric A.
Typo3 says that it allows PHP file extension files to be created or
uploaded to FileAdmin directory, but when I create or attempt an upload
it says Filetyle "php" not allowed.
Anyone else run into this problem ?
Eric Miller
Web Systems Engineer
Creighton University
Office: 402.280.3933
Cell: 402.740.2518
----------------------------------------
"A conservative is a man who believes that nothing should be done for
the first time." ~ Alfred E. Wiggam
----------------------------------------
_______________________________________________
Typo3-english mailing list
Typo3-english at lists.netfielders.de
http://lists.netfielders.de/cgi-bin/mailman/listinfo/typo3-english
Kraft Bernhard
2005-04-07 20:07:23 UTC
Permalink
Post by Miller, Eric A.
Typo3 says that it allows PHP file extension files to be created or
uploaded to FileAdmin directory, but when I create or attempt an upload
it says Filetyle "php" not allowed.
Anyone else run into this problem ?
I wouldn't want to call it problem.

Allowing uploading of PHP files to your server opens up a big security hole.

Everbody who has access to the fileadmin can execute arbitrary scripts on the
server ... and read your db password modify everything in the database (not just
what he is allowed to) and everything without admin rights !!!!

But do it a your own risk.

Its:
[BE][fileDenyPattern]
in the Install tool.


may you recover your data,
Bernhard

Continue reading on narkive:
Loading...