Rick, CFFM only disallows extensions? It doesn't do MIME checking? As in cffile's ACCEPT parameter?
The uploader I wrote for FCK 1.x added mime type checking. Rather than disallowing a specific list, it was then able to only *allow* a specific list. Not the same thing and a better way to go imho. I also used cgi.content_length to limit file upload size. Imperfect I know (the file has to arrive at the server in tmp form to measure it) but the best I could do. What I did was allow the developer to specify a list of acceptable MIME types, comma-delimited, which then defined what images could be uploaded in the image dialog, and what files could be uploaded in the link dialog. That link dialog is something that hasn't gotten any attention here and is a huge boon. Lets users upload pdfs, word docs, whatever you specify in your acceptable MIME type list. Its something my users had been screaming for literally for years and one of the major elements in deciding to start relying on FCKEditor. -- --Matt Robertson-- President, Janitor MSB Designs, Inc. mysecretbase.com ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Special thanks to the CF Community Suite Gold Sponsor - CFHosting.net http://www.cfhosting.net Message: http://www.houseoffusion.com/lists.cfm/link=i:4:187269 Archives: http://www.houseoffusion.com/cf_lists/threads.cfm/4 Subscription: http://www.houseoffusion.com/lists.cfm/link=s:4 Unsubscribe: http://www.houseoffusion.com/cf_lists/unsubscribe.cfm?user=11502.10531.4 Donations & Support: http://www.houseoffusion.com/tiny.cfm/54
