what you mean? you want to block all uploads from users that are not mp3? is that it?

Yes plus the other files like gif, php and any other files they upload thru music collection. Thats a big security risk.

I see what you say. well this is not directly blockable, a little bit of modification on one file's code is needed for that...

are you able to change a bit of code?

Yes. Do you have the changes?

yes.
this should be enough: open file /administrator/components/com_muscol/tables/song.php

go to line 90

add this:

$allowed_ext = array('mp3', 'MP3');

if(in_array($ext, $allowed_ext){

and then, at the end of the function, you must close that IF sentence. so you must add

} return "";

before the function ends, that is in line 126 I think.

let me know if you understand and if you succed.

oh by the way, you can add all the allowed extensions in that array I created.

Ok updated. } return ""; that is at the very end correct?

return $filename;
}

}

}

} return "";

no! a bit earlier:


return $filename;
}
} return "";

Ok so the end looks like this

return $filename;
}
} return "";
}

}

yes indeed

Just tested and go this error.



Warning: implode() [function.implode]: Invalid arguments passed in /home/crazypra/public_html/administrator/components/com_muscol/tables/album.php on line 122

Warning: implode() [function.implode]: Invalid arguments passed in /home/crazypra/public_html/administrator/components/com_muscol/tables/album.php on line 123

Parse error: syntax error, unexpected '{' in /home/crazypra/public_html/administrator/components/com_muscol/tables/song.php on line 91

sorry there was a ")" missing in the first part:
it should be this:

$allowed_ext = array('mp3', 'MP3'); 

if(in_array($ext, $allowed_ext)){

That fixed it!