4 replies to this topic

[J-c]

Hello,

I use image crud and i want to upload image files (jpg, png, gif). But image crud allows me to upload anything (txt, mpeg...).
How can i get restrictions ?

I try to change the 'accept_file_types' in libraries/image_crud.php => 'accept_file_types' => '/.[gif|jpeg|jpg|png]$/i'
But it doesn't work. And the application/config/image_crud doesn't have a line like :
$config['image_crud_file_upload_allow_file_types'] = 'gif|jpeg|jpg|png';

Thanks for your help and sorry for my english

[J-c]

nobody ?

[tlc033]

Hi J-c and welcome on GC.
Take a loock at class ImageUploadHandler on librarie/image_crud.php (~ line 552)

// The php.ini settings upload_max_filesize and post_max_size
        // take precedence over the following max_file_size setting:
                'max_file_size' => null,
                'min_file_size' => 1,
                'accept_file_types' => '/.+$/i',
                'max_number_of_files' => null,

Maby it can help you.

[J-c]

Hi tlc033,
thank you for your answer!

I try everything but nothing works :

//'accept_file_types' => '/.[gif|jpeg|jpg|png]$/i',
//'accept_file_types' => 'gif|jpeg|jpg|png',
//'accepted_file_types' => '/(\\.|\\/)(gif|jpeg|jpg|png)$/i',
'accept_file_types' => 'png',

I don't know why.
is it works for you ?

[J-c]

Corrected here by web-johnny : http://www.grocerycr...-vulnerability/