Page 1 of 1

"Script" in alias or directory name is bad

Posted: 14 Aug 2011, 19:01
by Bakual
I just figured out that if you have a directory name or an alias like in my case "ScriptureLink", the download will refuse to work and tells the user that the access to this page is restricted (403 error). The download still works if you strip away the alias from the URL so only the filenumber is left for the id.
The problems seems to be the word "script". If you strip this, everything works again.

The problem is when downloading the file. And if you want to upload a file to a directory with "script" in its name, it fails as well.

Probably a bug related to some safety checks to avoid script intrusion

Re: "Script" in alias or directory name is bad

Posted: 19 Aug 2011, 13:51
by Jan
Hi, thank you for this info, I will take a look at it, the word can be checked by a lot of different parts of Joomla!, I will take a look at it.

Jan