25.12 annoyace, (bug?): base upload path only in web root

[onoehring]

Hi
I see, we can easily define / change the upload path (in the image I changed from images to uploads).
However, this does not work, if I use the parent directory (..)

Code: Select all

../uploads

if the AG application resides in the root of by webhost .... and this would mean placing the uploads folder outside of webroot.

This would be important as this would secure all uploaded files by default (if links to the file go through user management).

base_upload.png (3.66 KiB) Viewed 5228 times

Olaf

[a.gneady]

You're right. AppGini apps don't currently support upload paths outside the web server's document root, but we have this on our backlog to fix in future releases.

[onoehring]

Hi Ahmed,

thanks. As I think this is security important, i am very looking forward to it.

Olaf