Skip to main content
J
jamie61880
Inspiring
March 29, 2016
Answered

attachment extensions on forms

  • March 29, 2016
  • 1 reply
  • 885 views

Hi everyone. My company has been hit with 3 viruses in the last few months and we think it's because of some attachments employees are clicking on and opening. We have a quote page on our web site form that allows users to attach files that get sent to our quote email address. The form does not prevent certain attachments from being uploaded and attached and sent to the email though. Does anyone know how to prevent certain file extension attachments to not be allowed to be sent from a form in Cold Fusion? I would probably want to prevent .exe, .zip, etc. files for sure. Thanks.

Andy

This topic has been closed for replies.
Correct answer WolfShade

Hi, jamie61880‌,

To my knowledge, there is no way to "blacklist" file extensions, but you can specify what filetypes are allowed if you are using CFFILE to upload the files to the server.  The link goes to the Adobe Help page for CFFILE.

HTH,

^_^

UPDATE:  Also, if you communicate with the server admin, you can set up a folder specifically for uploading the files to and set the folder permissions to NOT allow execution of any file.  This will automatically prevent an infected file from infecting the system.  You can then scan the file for virii and delete it if it's infected, before moving it elsewhere.

1 reply

WolfShade
WolfShadeCorrect answer
Legend
March 29, 2016

Hi, jamie61880‌,

To my knowledge, there is no way to "blacklist" file extensions, but you can specify what filetypes are allowed if you are using CFFILE to upload the files to the server.  The link goes to the Adobe Help page for CFFILE.

HTH,

^_^

UPDATE:  Also, if you communicate with the server admin, you can set up a folder specifically for uploading the files to and set the folder permissions to NOT allow execution of any file.  This will automatically prevent an infected file from infecting the system.  You can then scan the file for virii and delete it if it's infected, before moving it elsewhere.

J
jamie61880Author
Inspiring
March 29, 2016

Thanks! This works, but I'm not sure if we're going to want to limit ourselves on every file we receive. We receive some odd ones sometimes that are legitimate that we need to open.

WolfShade
WolfShade
Legend
March 29, 2016

In that case, you could forget about the accept parameter and just upload the file to a folder that has no execution privileges - this should be huge in helping to prevent the virus transmission.

If the server doesn't automatically scan all uploaded files, I'm not sure if CF has anything that could scan.

V/r,

^_^

Terms & ConditionsAccessibility statement
Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices