HTML Logo by World Wide Web Consortium (www.w3.org). Click to learn more about our commitment to accessibility and standards.

Moving forward with Composr

ocPortal has been relaunched as Composr CMS, which is now in beta. ocPortal 9 will be superseded by Composr 10.

Head over to compo.sr for our new site, and to our migration roadmap. Existing ocPortal member accounts have been mirrored.


SWF files ?

Login / Search

 [ Join | More ]
 Add topic 
Posted
Rating:
#71866 (In Topic #15105)
Avatar

Well-settled

my members can't upload swf files

Hi,
I have an issue I can't figure out (yes I'm new O_o)
My members keep getting this message "Sorry, but ‘swf’ files are not enabled for this website. " when they try to upload to a gallery.
What am I missing here? of course admins and Super-moderators don't have this problem.
any suggestions?
Thanks,
Tisnart

Making games is fun…having people play them is the reward!
Back to the top
 
Posted
Rating:
#71871
Avatar

Community saint

There is an option for allowed file types in admin zone>configuration>security options>uploaded file types

Hope that helps.
Back to the top
 
Posted
Rating:
#71872
Avatar

Well-settled

Thanks for that Brian, I have doubled checked that already and I clearly have swf in the list of Valid file types.
I tried this myself using the SU feature and it's weird because when you try to upload a swf file it shows it as a "allowed file type" in the browser?
Then if you select the file you want it uploads it and when it completes it 's then that it shows the mentioned error "Sorry, but 'swf' files are not enabled for this website. "

Making games is fun…having people play them is the reward!
Back to the top
 
Posted
Rating:
#71874
Avatar

Community saint

Just a guess but also make sure that 'swf' is a Valid Image type as I think that is what is used for galleries.

Bob
Back to the top
 
Posted
Rating:
#71875
Avatar

SWF files explicitly cannot be uploaded because they would be run inside the browser's security context for the website, with access to cookies, Javascript code, etc. So it'd be a serious security hole.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#71878
Avatar

Well-settled

So does that mean there's no way to allow my regular members to upload swf files? Or is their a work around?
Thanks for your replies.

Making games is fun…having people play them is the reward!
Back to the top
 
Posted
Rating:
#71882
Avatar

Community saint

Hi Tisnart,

There are a couple of ways around that. If your members have access to the .flv file that is created when you make a .swf, you can upload that, and OCP will use the built-in JWPlayer to play the video.

If that does not work for you, you can set permissions for the upload folder to allow "anonymous" to upload the swf, then place a link to the swf in their post.

Hope that helps.
Back to the top
 
Posted
Rating:
#71887
Avatar

Well-settled

Thanks for the suggestions psydoc,
It has to be swf files that are allowed and not just flv (they are games) .
The only other user group that I need to allow to do this(besides admin and super-moderators) is the Super-members.(without giving them super-moderator privileges)
I know there has to be a way for this to happen cause the super-moderators have this permission.
I just don't know how?

Making games is fun…having people play them is the reward!
Back to the top
 
Posted
Rating:
#71891
Avatar

Community saint

You are welcome.

I don't know if this would work, but you can give it a try.
  • go to > Admin Zone » Security » Usergroups » Add usergroup
  • add a group name you want and give it the same permissions as super-moderators
  • go to > Admin Zone » Security » Permissions Tree Editor
  • under "Site Tree" make sure you select the usergroup you created, then
  • Zone: Admin Zone
  • scroll down to "

    Permissions for selection


    make sure the box next to the usergroup you created in the first step is NOT ticked for "View access".
  • test
I did something similar to this for a site I created for a client, last year. The issue was not .swf files, but it did provide all the permissions for the group as super-moderators had with the exception of access to the Admin Zone.

I hope this time I got it right.

I am not sure if this will prevent the usergroup from accessing the admin zone if they try using a direct URL.
Back to the top
 
Posted
Rating:
#71892
Avatar

Well-settled

Thanx again psydoc,
but that's not going to work for me :'(

Making games is fun…having people play them is the reward!
Back to the top
 
Posted
Rating:
#71895
Avatar

You may enable "Use unrestricted markup that could be abused for XSS attacks" permission.

However enabling SWF upload for a group will allow malicious people in that group to take over full administrative access to the site if they put their mind to it.


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#71935
Avatar

Well-settled

Thanx Chris,
That almost worked. Now this message is coming up after upload is complete
".swf is either corrupt or an unrecognised image file type"

Making games is fun…having people play them is the reward!
Back to the top
 
Posted
Rating:
#71937
Avatar

Fan in action

Script developers should allow SWF and other files to be uploaded at the discretion of the site owner or admin. I see great use in allowing SWF to be uploaded by trusted parties - when they can be used to demonstrate a procedure or to instruct. It is like prohibiting the use of certain tools in a shop because someone may abuse their use. Or better yet, lock out all php ini / Apache elements to be loaded that may cause a security risk.

The error ".swf is either corrupt or an unrecognised image file type" may be because the MIME type (SWF) is not recognized.


Last edit: by Caps
Back to the top
 
Posted
Rating:
#71940
Avatar

Well-settled

Caps said

The error ".swf is either corrupt or an unrecognised image file type" may be because the MIME type (SWF) is not recognized.

Oh it's recognized! I know this for sure cause I uploaded a swf myself, then using the SU feature I tried to upload the same file (after I enabled "Use unrestricted markup that could be abused for XSS attacks" permission like Chris mentioned) and I get the message ".swf is either corrupt or an unrecognised image file type" like I mentioned earlier.

Making games is fun…having people play them is the reward!
Back to the top
 
Posted
Rating:
#71942
Avatar

Fan in action

"Oh it's recognized! I know this for sure cause I uploaded a swf myself."

You did not mention if you were able to play that SWF file within the post as a confirmation that MIME filter or MIME file SWF extension is detecting it.

While looking at the post, if the SWF is blank then it is a security issue imposed by ocPortal. You need to right click to see if SWF is trying to load.
Back to the top
 
Posted
Rating:
#71947
Avatar

Well-settled

Caps said

You did not mention if you were able to play that SWF file within the post as a confirmation that MIME filter or MIME file SWF extension is detecting it.

Yes I can play the swf file.
Take a look (if you want) Personal gallery of Tisnart - Tisnarts Site This is what I have been working on. they are all flash games (swf files). I need to be able to let a usergroup (CT-members) upload files of the same

Making games is fun…having people play them is the reward!
Back to the top
 
Posted
Rating:
#71957
Avatar

Worked for me in a test now. You need to upload as a video, but you have been doing so. Possibly you accidentally forgot that when testing as a regular user, or you put the swf in for the video thumbnail too (not allowed).


Become a fan of ocPortal on Facebook or add me as a friend. Add me on on Twitter.
Was I helpful?
  • If not, please let us know how we can do better (please try and propose any bigger ideas in such a way that they are fundable and scalable).
  • If so, please let others know about ocPortal whenever you see the opportunity.
  • If my reply is too Vulcan or expressed too much in business-strategy terms, and not particularly personal, I apologise. As a company & project maintainer, time is very limited to me, so usually when I write a reply I try and make it generic advice to all readers. I'm also naturally a joined-up thinker, so I always express my thoughts in combined business and technical terms. I recognise not everyone likes that, don't let my Vulcan-thinking stop you enjoying ocPortal on fun personal projects.
  • If my response can inspire a community tutorial, that's a great way of giving back to the project as a user.
Back to the top
 
Posted
Rating:
#71964
Avatar

Well-settled

Thanx Chris, I think I got everything working now :thumbs:
and thanx to everyone else that have helped  :cool:

Making games is fun…having people play them is the reward!
Back to the top
 
Posted
Rating:
#71966
Avatar

Fan in action

Hi Tisnart,

Can you summarize how you were able to upload and display SWF?

Are you able to do this in a forum post? This information would be helpful to others seeking a solution.
Back to the top
 
Posted
Rating:
#72002
Avatar

Well-settled

Yes of course :)
I did exactly what Chris said

Chris Graham said

You may enable "Use unrestricted markup that could be abused for XSS attacks" permission.

However enabling SWF upload for a group will allow malicious people in that group to take over full administrative access to the site if they put their mind to it.

I only enabled this for the the user group that I wanted to be able to upload swf files.
I thought it didn't work because when I tried it using the SU feature I kept forgetting to also add the thumbnail (me dum dum), so it kept giving me the message "".swf is either corrupt or an unrecognised image file type"

Caps said

Are you able to do this in a forum post? This information would be helpful to others seeking a solution.

I havn't tried this yet but I'll report back when I do

Making games is fun…having people play them is the reward!
Back to the top
 
1 guests and 0 members have just viewed this: None
Control functions:

Quick reply   Expand