Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-33602

Database picture field allows wrong filetypes to be selected

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Won't Fix
    • Affects Version/s: 2.3
    • Fix Version/s: None
    • Labels:
    • Testing Instructions:
      Hide
      1. Create a database activity with a picture field. And go to 'Add entry'.
      2. Use file picker to upload a .exe file into a picture database field. Verify that you are informed by Moodle that the file cannot be uploaded.
      3. Use file picker to upload a spreadheet into a picture database field. Verify that you are informed by Moodle that the file cannot be uploaded.
      4. Use file picker to upload a text document into a picture database field. Verify that you are informed by Moodle that the file cannot be uploaded.
      5. Rename a text document so it's file extension is .jpg and use file picker to upload it into a picture database field. Verify that the file causes no problems with Moodle.
      Show
      Create a database activity with a picture field. And go to 'Add entry'. Use file picker to upload a .exe file into a picture database field. Verify that you are informed by Moodle that the file cannot be uploaded. Use file picker to upload a spreadheet into a picture database field. Verify that you are informed by Moodle that the file cannot be uploaded. Use file picker to upload a text document into a picture database field. Verify that you are informed by Moodle that the file cannot be uploaded. Rename a text document so it's file extension is .jpg and use file picker to upload it into a picture database field. Verify that the file causes no problems with Moodle.
    • Affected Branches:
      MOODLE_23_STABLE

      Description

      While upload a .exe file is not allowed within File Picker itself, renaming a .exe to .jpg will do the trick.
      Although, an exception will be raised on the next page.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              fred Frédéric Massart
              Reporter:
              fred Frédéric Massart
              Participants:
              Component watchers:
              Adrian Greeve, Jake Dallimore, Mathew May, Mihail Geshoski, Peter Dias, Sujith Haridasan
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: