Thread

It seems users are having problems uploading images to my site.

First question, is there anyway to automatically resize large images into smaller web images through the upload form?

Second, there is one avatar that doesn’t seem to upload, I get the mime type error.  It works if i upload it as a super admin, but as a normal user it doesnt.

The image in question is here:
removed

Any ideas what it doesnt like about that image? It was taken on a mobile phone i think.

Greetings,

This has come up before I believe. Here is the resolved thread. Let us know if you have any questions.

This is a membership site, so users will be uploading avatars (and files through LG file upload extention).  So i don’t like the idea of turning of XSS.

Also do you know why an image file is throwing up this error?

Joobs, which build/version of EE are you using?

The most recent build (20080710) had some fixes for XSS.

Thanks for the link to the image in question. I’ll have the dev team look at it.

It seems a new build has come out today!

It seems “Optimized the upload functionality for XSS checks on images” has sorted my problem. 

I still need to fully test this to make sure i’m not doing something stupid like logging in as a superadmin etc.

Good stuff.  Yeah, please keep us in the loop.  We’ve got a new system going that should greatly reduce false positives, increase speed, and keep the same level of security and protection that you already enjoy.  Do try to beat it up!

Good stuff.  Yeah, please keep us in the loop.  We’ve got a new system going that should greatly reduce false positives, increase speed, and keep the same level of security and protection that you already enjoy.  Do try to beat it up!

Well one issue I have no run into is that it doesn’t like file extensions that are written in caps.  Gives this error:

The filetype you are attempting to upload is not allowed
The type of image you are attempting to upload is not an allowed type.

This is problem because MS Paint saves jpgs and gifs with capitalised file extensions!

Surely the case of the extension shouldn’t matter?

Should i just add JPG and GIF to the list of accepted mime types?

For some reason I thought that was already in there.  But won’t hurt to add it if it’s not.

Hey joobs.  What browser are you using to upload?  The capitalization of the file extension shouldn’t really be impacting on anything here.

Is your upload prefs set to images only, or all files?

Derek

I am using the avatar upload in the member control panel, rather than a upload directory.

I seem to be getting a slightly different error than i reported before (about the caps). Same in both IE7 and Firefox:

The filetype you are attempting to upload is not allowed
Images must be one of the following image types: jpg, jpeg, gif, png

I get this if logged in as a member or superadmin.  A file like “test.jpg” will upload for an avatar, but if i rename the extension as “test.JPG” it gives me the above error.

I haven’t tested to see if the problem happens with normal file uploading.

Sorry for popping in here but as a quick note I have seen this mentioned before on the forums and I just tried this myself using the Edit Avatar link in my control panel here on these forums and if you have a capitalised extension then that error comes back. I had downloaded the image that was already there first so the image was okay but as soon as you change the extension to be capitals it all goes awry.

More information here.

Hope that helps.

Best wishes,

Mark

Oh, I see.  Sorry, I mistook this for something else.  I’ve amended the behaviour of EE to allow for capital file extensions.

Sure no problem.  Sent you an email 😊

Joobs- this one now squared away?  If so, I’ll close it out.

Yes

And the modified file Derek sent me seems to be working 😊

Thanks for the help