Page 1 of 1

25.12 annoyace, (bug?): base upload path only in web root

Posted: 2025-07-30 07:10
by onoehring
Hi
I see, we can easily define / change the upload path (in the image I changed from images to uploads).
However, this does not work, if I use the parent directory (..)

Code: Select all

../uploads
if the AG application resides in the root of by webhost .... and this would mean placing the uploads folder outside of webroot.

This would be important as this would secure all uploaded files by default (if links to the file go through user management).
base_upload.png
base_upload.png (3.66 KiB) Viewed 5234 times
Olaf

Re: 25.12 annoyace, (bug?): base upload path only in web root

Posted: 2025-07-31 12:33
by a.gneady
You're right. AppGini apps don't currently support upload paths outside the web server's document root, but we have this on our backlog to fix in future releases.

Re: 25.12 annoyace, (bug?): base upload path only in web root

Posted: 2025-07-31 13:06
by onoehring
Hi Ahmed,

thanks. As I think this is security important, i am very looking forward to it.

Olaf