View ProjeQtOr On SourceForge.net
ProjeQtOr - Project Management Tool
Supportez nous sur Capterra
OIN - Open Invention Network
ProjeQtOr free project management software - Issue "Attachment" - ProjeQtOr

Prochaines Sessions

Les prochaines formations et démonstrations sont ouvertes, inscrivez-vous rapidement !

 

Démonstration de ProjeQtOr

(gratuit, sur inscription)
 

6 novembre 2025 (10h30-12h)

2 décembre 2025 (16h-17h30)

  
 

Planifiez avec ProjeQtOr

8 et 9 octobre 2025 (9h-12h30)

19 et 20 novembre 2025 (9h-12h30)

  
 

Administrez avec ProjeQtOr

15 et 16 octobre 2025 (9h-12h30)

26 et 27 novembre 2025 (9h-12h30)

  

 

 

Issue "Attachment"

More
09 Oct 2025 17:56 #1 by CSO_Arnaud
Issue "Attachment" was created by CSO_Arnaud
Hi everyone,According to the online help documentation, it should be possible to upload any type of file in the "Attachment" section. However, I’ve noticed that SVG files seem to cause an issue.Thanks in advance for your help!Best regards,



 2025-10-09 17:20:42.221 ***** ERROR ***** [V12.2.2] [868] HACK ================================================================
2025-10-09 17:20:42.221 ***** ERROR ***** [V12.2.2] [868] Try to hack detected
2025-10-09 17:20:42.221 ***** ERROR ***** [V12.2.2] [868] Source Code = try to upload svg file with included script (../files/attach//attachment_2500/courbes_convoyeur.svg)
2025-10-09 17:20:42.222 ***** ERROR ***** [V12.2.2] [868] QUERY_STRING = csrfToken=31a21406ffe20677840f11dcee35222c83c4ef860cdca4a20495e082c71f8f663cb3e8&directAccessIndex=
2025-10-09 17:20:42.222 ***** ERROR ***** [V12.2.2] [868] REMOTE_ADDR = 192.168.180.129
2025-10-09 17:20:42.222 ***** ERROR ***** [V12.2.2] [868] SCRIPT_FILENAME = /var/www/vhosts/open366.uxp-corp.com/httpdocs/tool/saveAttachment.php
2025-10-09 17:20:42.222 ***** ERROR ***** [V12.2.2] [868] CONNECTED USER = #868 - pierre.neel
2025-10-09 17:20:42.223 ***** ERROR ***** [V12.2.2] [868] Last connection = 2025-10-09 11:38:52
2025-10-09 17:20:42.223 ***** ERROR ***** [V12.2.2] [868] Last access = 2025-10-09 17:20:19
2025-10-09 17:20:42.223 ***** ERROR ***** [V12.2.2] [868] Disconnection =
2025-10-09 17:20:42.223 ***** ERROR ***** [V12.2.2] [868] === Trace Stack for last error ===
2025-10-09 17:20:42.223 ***** ERROR ***** [V12.2.2] [868] => /var/www/vhosts/open366.uxp-corp.com/httpdocs/tool/projeqtor.php at line 1734 calling debugPrintTraceStack()
2025-10-09 17:20:42.223 ***** ERROR ***** [V12.2.2] [868] => /var/www/vhosts/open366.uxp-corp.com/httpdocs/model/Security.php at line 302 calling traceHack()
2025-10-09 17:20:42.223 ***** ERROR ***** [V12.2.2] [868] => /var/www/vhosts/open366.uxp-corp.com/httpdocs/tool/saveAttachment.php at line 312 calling Security:checkEvilFile()
2025-10-09 17:20:42.224 ***** ERROR ***** [V12.2.2] [868] ===

Please Connexion or Create an account to join the conversation.

More
10 Oct 2025 09:20 - 10 Oct 2025 09:23 #2 by maxca
Replied by maxca on topic Issue "Attachment"
Hello,
Yes, files with the .svg extension are not supported. I am going to  create a ticket.
Please note that you are using version 12.2.2; the latest stable version is 12.3.1. (The forum cannot respond to older versions.)
Have a nice day, 
Last edit: 10 Oct 2025 09:23 by maxca.

Please Connexion or Create an account to join the conversation.

More
10 Oct 2025 17:41 #3 by babynus
Replied by babynus on topic Issue "Attachment"
You can upload svg file, but not svg file with included script : it is a security breach
Babynus
Administrator of ProjeQtOr web site

Please Connexion or Create an account to join the conversation.

Moderators: babynus, protion
Time to create page: 0.148 seconds

Paramétrages de cookies

×

Cookies fonctionnels

Ce site utilise des cookies pour assurer son bon fonctionnement et ne peuvent pas être désactivés de nos systèmes. Nous ne les utilisons pas à des fins publicitaires. Si ces cookies sont bloqués, certaines parties du site ne pourront pas fonctionner.

Session

Veuillez vous connecter pour voir vos activités!

Autres cookies

Ce site web utilise un certain nombre de cookies pour gérer, par exemple, les sessions utilisateurs.

Login Form