Simple File Upload




Version 1.3.5 is tested and verified on Joomla 2.5! (2012-01-14)
Use download for 1.6/1.7!
!!!Security Release 2012-01-02!!!
JED found an exploit in the code where they managed to upload a file named "file.php5". Unfortunately I had not added php5 to the blocked extensions list but now (version 1.3.5) it is added along with .php6 and an extra check to see if ".php" exists in the file-name!
Please make sure to update to version 1.3.5 as soon as possible!
UPDATE 2010-01-04: To be even more on the safe side I have now added code to inspect GIF comments. There is a new option called "Block PHP GIF comments" in the settings which is default set to "Yes" which will read any GIF comment and block the upload if the comment contains any PHP code!
!!!Security Release!!!
It includes the following key features:
- Multiple modules on the same page with different settings
- "Add Note" to uploaded files
- Image re-size
- Automated thumbnail creation for images
- Image compress for JPEG and PNG
- Now supports both "User Named Directory" and "User Defined Directory"! (see below)
- CAPTCHA
- List files in upload directory in pop-up (FancyBox)
- Multiple files upload
- Notification e-mail
- And more...
More features:
- Integrated Ajax in Joomla framework
- "Blacklist" of extensions (threat-protection)
- Multi select file browser for FireFox 3.6+ versions
- Info popup-box now contains the link (URL)
- URL attached in e-mail notice
- Redirect option after uploading
- User Named Directory: You can set a root path for User Named Directories, e.g. "/home/users/" and then select which users should have the option to use the directory.
- User Defined Directory: You can select from the list of users and add custom directory paths for the user.
- Multiple choice of upload paths added. If a users has "User Named Directory" and/or "User Defined Directory" the user will get a pop-up box asking for the directory to upload to.
- List files option from upload directory in "pop-up"
- Form Fields can now be collected into the same file. A few JED Image Galleries are using a parameter file for labels/description of images.
- Multiple languages.
Take care!
Regards,
Anders
This is a bit crude in display, but with a little editing and tweaking on my end I can customize it. Functionality though seems to be working fine for me. Adjusting what file types are allowed is a breeze due to the pop-up letting you know exactly what isn't allowed. Just paste the string into the end of the list, and bingo its allowed.
One suggestion, when creating user directories I suggest that by default you automatically create an index.html file to be placed in the user directory created. This way you can keep the directory from being accessed from the URL bar.
Salud!
Peter (Big Screen Entertainment Group)
Thanks for the feedback, Peter! I'm glad you like it!
In the latest release of v1.2 I have included the creation of a "index.html" file when SFU creates a new directory. (Thanks for the suggestion!)
Regards,
Anders
I must really let Anders know how much I appreciate the help!
TACK! (=Thank You in Swedish) :)
//Jonas
It's perfectly simple and if you find something that doesn't work just right, the developer will fix it. I personally had an issue with html email not formatting exactly right (which really doesn't matter since only you get the email anyway) but I let Anders know what was going on and he had a fix to me and loaded on his site for everyone else in less than a day. He also made a few other changes for me and had them to me in less than a few hours.
In my experience this developer is quick to respond to, and solve, issues as they come up.
All in all, the extension does exactly what the developer says.
It is a perfectly simple solution for allowing users to upload files to your site, it's free, and it's getting better with each new release.
Awesome job!
One suggestion for the future. You should work on a captcha system for security reasons. You don't want people spamming your uploader right? ;)
Hi,
thanks for the review!
In version 0.9.2b you are able to allow all extensions by adding a * for "Allowed File types". This will make any file up-loadable.
If you can't get it working for any file just send me a note from http://wasen.net and we'll figure it out.
//Anders







