Does any one know if there might be support (or potential to support) virus scanning of uploads using WYSIWYG file browsers such as IMCE? It would be a really handy feature given how widely file WYSIWYG file browser modules are used on sites. Is there something preventing Clamav from supporting uploads using such applications? Or do file browsers circumvent the Drupal file upload process or something in a way that makes it unfeasible to support?

Thanks,
Sam

Comments

sambonner’s picture

Well, I'm interested in this functionality for a project that uses the IMCE module so I've created a patch to add ClamAV scanning functionality (and in doing so answered my own original questions :P !).

The patch adds an additional checkbox to to the ClamAV admin screen to enable for scanning IMCE upload fields and adds an additional validator to the IMCE file upload form to check uploads for viruses. It scans all files uploaded via the IMCE file browser.

Is this something the maintainers would be interested in adding to the 7.x ClamAV release? Suggestions welcome on possible improvements etc.

Thanks!
Sam

sambonner’s picture

Noticed a small mistake in that patch, this one is more correct.

sambonner’s picture

Another modification, tidied a mistake in calling file_save_upload function.

sambonner’s picture

Bumping this, any chance of it getting added upstream? Happy to work through any issues the maintainer might have with it.

Thanks,
Sam

sambonner’s picture

Status: Active » Needs review
StatusFileSize
new1.65 KB

Bumping this with a new patch, adds more sensible defaults to new admin setting, removes unnecessary function.

Anyone willing to get this RTBC'd ?

Thanks,
Sam

rooby’s picture

This will hopefully be taken care of by #1630604: Scan all files.

At least for drupal 7.

sambonner’s picture

Status: Needs review » Closed (fixed)

Confirm https://drupal.org/node/1630604 solves this in a more elegant/reusable fashion.