se7enxweb / enhancedezbinaryfile
eZ Publish Legacy extension which provides a simple solution for extending thet default eZ Publish Binary File Datatype with support for uploadable files for collected information nodes. Great for smart developers!
Fund package maintenance!
se7enxweb
Patreon
www.paypal.me/7xweb
account.venmo.com/u/se7enxweb
cash.app/$7xweb
se7enx.com
Installs: 102
Dependents: 2
Suggesters: 0
Security: 0
Stars: 1
Watchers: 0
Forks: 6
Open Issues: 0
Type:ezpublish-legacy-extension
Requires
- php: >=5.0.0
- se7enxweb/ezpublish-legacy-installer: *
This package is auto-updated.
Last update: 2024-11-29 09:03:09 UTC
README
/* Enhanced eZBinaryfile for eZ publish 4.0+ Developed by Steven E. Bailey and Sebastiaan van der Vliet Contactivity bv, Leiden the Netherlands http://www.contactivity.com, info@contactivity.com This file may be distributed and/or modified under the terms of the GNU General Public License" version 2 as published by the Free Software Foundation and appearing in the file LICENSE.GPL included in the packaging of this file. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. The "GNU General Public License" (GPL) is available at http://www.gnu.org/copyleft/gpl.html. */ Enhanced eZBinaryfile Datatype: Version: 1.0 ------------------------------------- 1. Context ---------- This datatype was developed to make it possible to send binary files collected from forms as multipart MIME emails. 2. Features ----------- The Enhanced eZBinaryfile datatype makes it possible to use the information collector functionality to allow anonymous users to send files as attachments. 3. Example of use ----------------- Enhanced eZBinaryfile can be used to allow people to attach documents to contact forms. 4. Known bugs, limitations, etc. ----------------------------- The datatype has the following limitations and bugs: - Even with restrictions, it remains a potential security risk to allow anonymous users to upload binary files to the server. - If the file is valid but the form fails for another reason the file is still uploaded to the storage directory. - When the collectedinfo is removed from the backend, the file is not removed. - File types are only validated by the filename which is potentially dangerous. - This makes use of the parsexml template operator (which is included) in the autoloads directory. In the event that this template operator is already being loaded as an extension, then the autoload should be removed. - Not tested with a cluster. Shouldn't need cluster functionality anyway with the way it is set up now. 5. Feedback -------------------------------- Please send all your remarks, comments and suggestions for improvement to info@contactivity.com. 6. Disclaimer ------------------------- This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.