diff options
| author | Andrey Andreev <narf@devilix.net> | 2013-10-21 14:35:05 +0200 |
|---|---|---|
| committer | Andrey Andreev <narf@devilix.net> | 2013-10-21 14:35:05 +0200 |
| commit | 32c7212edb0488524a0eece98cb1e2321ee90c29 (patch) | |
| tree | e4e804ed42272e720cad4cc7a6c5fd85b42aec85 /user_guide_src/source/libraries/file_uploading.rst | |
| parent | 72b4b3cbc71d2c266938b8878baba11c11c565ca (diff) | |
Add CI_Upload:: option
Diffstat (limited to 'user_guide_src/source/libraries/file_uploading.rst')
| -rw-r--r-- | user_guide_src/source/libraries/file_uploading.rst | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/user_guide_src/source/libraries/file_uploading.rst b/user_guide_src/source/libraries/file_uploading.rst index a295d7427..ac56fabce 100644 --- a/user_guide_src/source/libraries/file_uploading.rst +++ b/user_guide_src/source/libraries/file_uploading.rst @@ -224,6 +224,11 @@ Preference Default Value Options Descripti **detect_mime** TRUE TRUE/FALSE (boolean) If set to TRUE, a server side detection of the file type will be performed to avoid code injection attacks. DO NOT disable this option unless you have no other option as that would cause a security risk. +**mod_mime_fix** TRUE TRUE/FALSE (boolean) If set to TRUE, multiple filename extensions will be suffixed with an + underscore in order to avoid triggering `Apache mod_mime + <http://httpd.apache.org/docs/2.0/mod/mod_mime.html#multipleext>`_. + DO NOT turn off this option if your upload directory is public, as this + is a security risk. ============================ ================= ======================= ====================================================================== Setting preferences in a config file |