FLV and AS extentions as a standard in upload file

[ijssoft]

Hi all,

Every time we install a new version, we have to change the FlashUploadAllowExtensions settings to make sure the FLV (Flash movie content) and AS (external actionscript) files of our Flash animations can be uploaded into the Flash upload dir. It would be great if those two extensions would be included as an standard in the config file, because we always use these two features of Flash on our websites. Something like this: FCKConfig.FlashUploadAllowedExtensions = ".(swf|fla|flv|as)$" ;

Many greetings,

Bastiaan Verhoeven Netherlands

[ijssoft]

This is also would be great in the filemanager\upload\php\config.php file.

[Alfonso Martínez de Lizarrondo]

I could understand the need to upload flv files, but why do you want to upload the .fla and .as?

They won't be inserted as a flash element, so if you want to upload them as samples or whatever, then it should be treated like .doc, .zip and the like.

[ijssoft]

I do not wish that the .FLA file is in that list. I agree with alfonsoml. But the .AS file sets the Actionscript for the Flash movie and needs to be upload along with the Flash movie to function. That is why we would like it placed into the upload allowed list, along with the SWF and FLV files.

[Alfonso Martínez de Lizarrondo]

No, you don't need the .as for the flash file to work. Try it out.

[ijssoft]

Ah yes, thank you for sharing that information.
Ofcourse we are aware the you do not need the .as file for Flash to function. The designs which we produce do need the .as file for incorporation of certain items into the Flash.

But now back to the main subject:
We still would like it if the .as and .flv values where default in the FCKConfig.FlashUploadAllowedExtensions value in the config.php file.

[Frederico Caldeira Knabben]

As explained by Alfonso, and confirmed by ijssoft, it doesn't seams to be a common need to upload .as files, so there is no argumentation to enforce the need of this extensions "by default".

Being the extensions configurable, you would just need to edit the config file to best reflect your needs.

[ijssoft]

My goodness Fred, it's just two clicks to make us happy.
Pretty amazing that our suggestions, which suits the needs of the many whom are now changing the setting every update, are cast aside in a blink.
We are happy with the editor, but now it seems we are strangly mistaken about the flexibility of it's programmers.

[Frederico Caldeira Knabben]

Replying to ijssoft:

My goodness Fred, it's just two clicks to make us happy.
Pretty amazing that our suggestions, which suits the needs of the many whom are now changing the setting every update, are cast aside in a blink.
We are happy with the editor, but now it seems we are strangly mistaken about the flexibility of it's programmers.

I'm sorry that you have had the wrong impression.

Your phrase "The designs which we produce do need the .as" suggests that this is your need, and not the generic case. The term "By default" is strictly related to the "generic assumption", not to a specific user case (minority).

It is not anything personal here. The idea is quite simple. If we have clear reasons to do something, we will be willing to do it. The "because I want it" is not enough.

I know that this change is quite small, and would take less time to implement it than writing this comment, but this is a generic approach we take for every single change to do, no matter its size. In this way we guarantee the quality of the editor. It also means that we think well before doing any move, which is a good thing.

Also, we can't assume things here. In the other hand, we have people who precisely care about restricting file extensions to be uploaded to their servers. And even others who would like to have other extensions there just because of their design needs.

Back to the subject, it seams that the .as addition doesn't bring security issues (the same is valid for an infinity of other extensions, like .txt, .jpg, .doc). As requested by ijssoft, let's leave this one open, so we can think about it better and catch opinions from others.

[ijssoft]

Thank you.

[Marcus Lum]

I can chime in that I don't think having .AS files should be a default option. I'd like to see the file types allowed to be uploaded be as limited as possible by default for security reasons. It is an easily configured option.

[Alfonso Martínez de Lizarrondo]

I don't see any security issue about allowing the upload of .as files, but I don't see it useful as a general rule for everybody.

I would vote to change the allowed extensions for the Flash type to .swf and .flv, and maybe allow also .xml and .jpg

[Alfonso Martínez de Lizarrondo]

The .flv has been added in #1325 and finally the .fla has been removed from the default configuration.