https://docs-old.ckeditor.com/index.php?action=history&feed=atom&title=CKFinder_1.x%2FDevelopers_Guide%2FColdFusion%2FConfiguration%2FSecurity%2FDouble_file_extensions 2026-04-07T16:16:10Z Revision history for this page on the wiki MediaWiki 1.29.1 https://docs-old.ckeditor.com/index.php?title=CKFinder_1.x/Developers_Guide/ColdFusion/Configuration/Security/Double_file_extensions&diff=3503&oldid=prev 2010-05-28T06:46:33Z

<p>moved <a href="/CKFinder/Developers_Guide/ColdFusion/Configuration/Security/Double_file_extensions" class="mw-redirect" title="CKFinder/Developers Guide/ColdFusion/Configuration/Security/Double file extensions">CKFinder/Developers Guide/ColdFusion/Configuration/Security/Double file extensions</a> to <a href="/CKFinder_1.x/Developers_Guide/ColdFusion/Configuration/Security/Double_file_extensions" title="CKFinder 1.x/Developers Guide/ColdFusion/Configuration/Security/Double file extensions">CKFinder 1.x/Developers Guide/ColdFusion/Configuration/Security/Double file extensions</a></p> <table class="diff diff-contentalign-left" data-mw="interface"> <tr style='vertical-align: top;' lang='en'> <td colspan='1' style="background-color: white; color:black; text-align: center;">← Older revision</td> <td colspan='1' style="background-color: white; color:black; text-align: center;">Revision as of 06:46, 28 May 2010</td> </tr><tr><td colspan='2' style='text-align: center;' lang='en'><div class="mw-diff-empty">(No difference)</div> </td></tr></table>

Admin https://docs-old.ckeditor.com/index.php?title=CKFinder_1.x/Developers_Guide/ColdFusion/Configuration/Security/Double_file_extensions&diff=1082&oldid=prev 2008-01-02T08:25:51Z

<p></p> <table class="diff diff-contentalign-left" data-mw="interface"> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;' lang='en'> <td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td> <td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 08:25, 2 January 2008</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>{{Ckfinder Double extensions Description|code=config.checkDoubleExtension = true&amp;nbsp;;}}</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>{{Ckfinder Double extensions Description|code=<ins class="diffchange diffchange-inline">&lt;pre&gt;</ins>config.checkDoubleExtension = true&amp;nbsp;;<ins class="diffchange diffchange-inline">&lt;/pre&gt;</ins>}}</div></td></tr> <!-- diff cache key ckeditor_docsold:diff:version:1.11a:oldid:1081:newid:1082 --> </table>

W.olchawa https://docs-old.ckeditor.com/index.php?title=CKFinder_1.x/Developers_Guide/ColdFusion/Configuration/Security/Double_file_extensions&diff=1081&oldid=prev 2008-01-02T08:25:29Z

<p></p> <table class="diff diff-contentalign-left" data-mw="interface"> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;' lang='en'> <td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td> <td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 08:25, 2 January 2008</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>{{Ckfinder Double extensions Description|code=<del class="diffchange diffchange-inline">�UNIQ685ad18c6d86cd16-pre-00000001-QINU</del>}}</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>{{Ckfinder Double extensions Description|code=<ins class="diffchange diffchange-inline">config.checkDoubleExtension = true&amp;nbsp;;</ins>}}</div></td></tr> <!-- diff cache key ckeditor_docsold:diff:version:1.11a:oldid:1080:newid:1081 --> </table>

W.olchawa https://docs-old.ckeditor.com/index.php?title=CKFinder_1.x/Developers_Guide/ColdFusion/Configuration/Security/Double_file_extensions&diff=1080&oldid=prev 2008-01-02T08:24:47Z

<p></p> <table class="diff diff-contentalign-left" data-mw="interface"> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;' lang='en'> <td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td> <td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 08:24, 2 January 2008</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>{{Ckfinder Double extensions Description|code=<del class="diffchange diffchange-inline">&lt;</del>pre<del class="diffchange diffchange-inline">&gt;config.checkDoubleExtension = true&amp;nbsp;;&lt;/pre&gt;</del>}}</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>{{Ckfinder Double extensions Description|code=<ins class="diffchange diffchange-inline">�UNIQ685ad18c6d86cd16-</ins>pre<ins class="diffchange diffchange-inline">-00000001-QINU</ins>}}</div></td></tr> <!-- diff cache key ckeditor_docsold:diff:version:1.11a:oldid:1079:newid:1080 --> </table>

W.olchawa https://docs-old.ckeditor.com/index.php?title=CKFinder_1.x/Developers_Guide/ColdFusion/Configuration/Security/Double_file_extensions&diff=1079&oldid=prev 2008-01-02T08:24:19Z

<p></p> <table class="diff diff-contentalign-left" data-mw="interface"> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;' lang='en'> <td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td> <td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 08:24, 2 January 2008</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>{{Ckfinder Double extensions Description|&lt;pre&gt;config.checkDoubleExtension = true&amp;nbsp;;</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>{{Ckfinder Double extensions Description|<ins class="diffchange diffchange-inline">code=</ins>&lt;pre&gt;config.checkDoubleExtension = true&amp;nbsp;;&lt;/pre&gt;}}</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>&lt;/pre&gt;}}</div></td><td colspan="2">&#160;</td></tr> <!-- diff cache key ckeditor_docsold:diff:version:1.11a:oldid:1078:newid:1079 --> </table>

W.olchawa https://docs-old.ckeditor.com/index.php?title=CKFinder_1.x/Developers_Guide/ColdFusion/Configuration/Security/Double_file_extensions&diff=1078&oldid=prev 2008-01-02T08:22:09Z

<p></p> <table class="diff diff-contentalign-left" data-mw="interface"> <col class='diff-marker' /> <col class='diff-content' /> <col class='diff-marker' /> <col class='diff-content' /> <tr style='vertical-align: top;' lang='en'> <td colspan='2' style="background-color: white; color:black; text-align: center;">← Older revision</td> <td colspan='2' style="background-color: white; color:black; text-align: center;">Revision as of 08:22, 2 January 2008</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Line 1:</td> <td colspan="2" class="diff-lineno">Line 1:</td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline">Due to security issues with Apache modules, it is recommended to leave the following setting enabled:</del></div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins class="diffchange diffchange-inline">{{Ckfinder Double extensions Description|</ins>&lt;pre&gt;config.checkDoubleExtension = true&amp;nbsp;;</div></td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>&lt;pre&gt;config.checkDoubleExtension = true&amp;nbsp;;</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>&lt;/pre&gt;<ins class="diffchange diffchange-inline">}}</ins></div></td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>&lt;/pre&gt; &#160;</div></td><td colspan="2">&#160;</td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline">How does it work? Suppose the following:</del></div></td><td colspan="2">&#160;</td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>&#160;</div></td><td colspan="2">&#160;</td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline">If &quot;php&quot; is on the denied extensions list, a file named foo.php cannot be uploaded. If &quot;rar&quot; (or any other) extension is allowed, one can upload a file named foo.rar. The file foo.php.rar has &quot;rar&quot; extension so, in theory, it can be also uploaded.</del></div></td><td colspan="2">&#160;</td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>&#160;</div></td><td colspan="2">&#160;</td></tr> <tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del class="diffchange diffchange-inline">In some conditions Apache can treat the foo.php.rar file just like any PHP script and execute it. If CheckDoubleExtension is enabled, each part of the file name after a dot is checked, not only the last part. In this way, uploading foo.php.rar would be denied, because &quot;php&quot; is on the denied extensions list.</del></div></td><td colspan="2">&#160;</td></tr> <!-- diff cache key ckeditor_docsold:diff:version:1.11a:oldid:968:newid:1078 --> </table>

W.olchawa https://docs-old.ckeditor.com/index.php?title=CKFinder_1.x/Developers_Guide/ColdFusion/Configuration/Security/Double_file_extensions&diff=968&oldid=prev 2007-12-28T13:25:32Z

<p>New page: Due to security issues with Apache modules, it is recommended to leave the following setting enabled: &lt;pre&gt;config.checkDoubleExtension = true ; &lt;/pre&gt; How does it work? Suppose the f...</p> <p><b>New page</b></p><div>Due to security issues with Apache modules, it is recommended to leave the following setting enabled:<br /> &lt;pre&gt;config.checkDoubleExtension = true&amp;nbsp;;<br /> &lt;/pre&gt; <br /> How does it work? Suppose the following:<br /> <br /> If &quot;php&quot; is on the denied extensions list, a file named foo.php cannot be uploaded. If &quot;rar&quot; (or any other) extension is allowed, one can upload a file named foo.rar. The file foo.php.rar has &quot;rar&quot; extension so, in theory, it can be also uploaded.<br /> <br /> In some conditions Apache can treat the foo.php.rar file just like any PHP script and execute it. If CheckDoubleExtension is enabled, each part of the file name after a dot is checked, not only the last part. In this way, uploading foo.php.rar would be denied, because &quot;php&quot; is on the denied extensions list.</div>

W.olchawa