Jump to content

Bypassing attachment restrictions


Recommended Posts

Hello,

in my community users are able to upload images/files to the forum, but not to private messages. But it is possible to bypass this restriction:

  • Start a new topic in the forum and upload the image
  • Insert the image into the topic
  • Copy the inserted image into the clipboard
  • Start a new private message and paste the image from the clipboard into the editor
  • Submit the private message
  • Cancel the new topic

-> Image is now a valid attachment of the private message (tested with IPS 4.5).

Is this expected behavior?

Kind regards,

Stefan

Link to comment
Share on other sites

10 hours ago, desti said:

Nope, it's not attachment to PM, image will be deleted by cleanup task.

I can not confirm this. The image is listed under "Files" in ACP and when I click "View locations", the image is referenced by a private message. The cleanup task does not delete this attachment.

Kind regards,

Stefan

Link to comment
Share on other sites

Yeah - reproduced. Log a ticket on that.

  • The copied image is added to the PM because it is a URL that is being pasted in, as opposed to an attachment - that is how the image can be added in.
  • The attachment, originally uploaded to a topic, would not be valid if it was deleted prior to the 'cancel new topic' action.
  • If the attachment was orphaned, instead of associated with the PM, then it would end up being cleaned up eventually (I think)
Edited by Nathan Explosion
Link to comment
Share on other sites

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...