Php photo gallery TWG | JFUploader | TWG Flash upload | WFU | Forum

I discovered something by accident. Some of my pics refused to show up (nothing in Firefox, cross in Explorer). Turns out the original filename end in a . and TWG does not like that ?

i.e. picture..jpg (note: .. one is last in filename, one for the extension)

this is not a bug - this a build in like that because .. is not allowed in any of my parameters. Many parameters are attached to a pathname and this would then e.g. allow to get into another directory than the one you want to. (e.g. adding .. to the album parameter or the image parameter)

To prevent hackers to break into TWG I have disallowed this everywhere. (detection could be better - but it's better to be 100% secure before missing something .)

/Michael