MyBB Community Forums

Full Version: what type of files would you not allow users to upload?
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
in the forum backoffice it ask to set the permissions on what files users can upload to the forum.

my question is which type of files would you not allow users of your forum to upload? thanks for the help in advance!
This is a good basic list:
  • images (bmp, gif, jpg/jpeg, png)
  • word processor documents (doc, docx, odt, rtf) and plain text (txt)
  • spreadsheet documents (ods, xls, xlsx)
  • presentation documents (odp, ppt, pptx)

It's also a good idea to allow the most common compressed file types like gz, tar and zip. So users are able to upload exotic file types.

Any other file type dependent on your site topic.

EDIT: I forgot PDF. Wink
(2010-01-21, 01:54 PM)querschlaeger Wrote: [ -> ]This is a good basic list:
  • images (bmp, gif, jpg/jpeg, png)
  • word processor documents (doc, docx, odt, rtf) and plain text (txt)
  • spreadsheet documents (ods, xls, xlsx)
  • presentation documents (odp, ppt, pptx)

It's also a good idea to allow the most common compressed file types like gz, tar and zip. So users are able to upload exotic file types.

Any other file type dependent on your site topic.

EDIT: I forgot PDF. Wink

I think you answered the wrong question. Big Grin
I think you posted the list of allowed files.
"what type of files would you not allow users to upload?"
querschlaeger has the right idea about white-listing file types instead of black-listing them. Unless you know what type of file it is, you can't send the proper content-type header, and thus the browser won't know how to handle it.

Also, you should scan uploaded files for viruses if possible. This is especially important for archive types (zip, tgz, rar) which contain unknown / unverified files.