Closed (duplicate)
Project:
ImageField
Version:
6.x-3.0-alpha2
Component:
Miscellaneous
Priority:
Normal
Category:
Support request
Assigned:
Unassigned
Reporter:
Created:
28 Oct 2008 at 07:42 UTC
Updated:
1 Dec 2008 at 22:37 UTC
When I use imagefield to upload image , I found that if I select a image and press upload, then it will upload to my server. it's a correct action.
However, if I uploaded a wrong image, then I replace another one image and press upload button. the wrong image that I have uploaded still exist in my server.
I guess if a hacker create a script to replace replace ad replace image. then many image will upload to my server. also, some user actually upload the wrong image , that also use of the server space.
Comments
Comment #1
mecano commentedsubscribing
Comment #2
gregglesSpecifically where on the server does the file get uploaded?
Comment #3
mecano commentedHe means files are not physicaly replaced when you replace a file through the form, even when using the same name for replacing the same file, the new file gets incrementaly renamed filling up the server space with no reason.
Comment #4
drewish commenteda filefield issue: #292151: Files are not deleted when replaced
Comment #5
drewish commentedthough temp files should be removed during the cron run.