Hi everyone,According to the online help documentation, it should be possible to upload any type of file in the "Attachment" section. However, I’ve noticed that SVG files seem to cause an issue.Thanks in advance for your help!Best regards,
2025-10-09 17:20:42.221 ** ERROR ** [V12.2.2] [868] HACK ================================================================
2025-10-09 17:20:42.221 ** ERROR ** [V12.2.2] [868] Try to hack detected
2025-10-09 17:20:42.221 ** ERROR ** [V12.2.2] [868] Source Code = try to upload svg file with included script (../files/attach//attachment_2500/courbes_convoyeur.svg)
2025-10-09 17:20:42.222 ** ERROR ** [V12.2.2] [868] QUERY_STRING = csrfToken=31a21406ffe20677840f11dcee35222c83c4ef860cdca4a20495e082c71f8f663cb3e8&directAccessIndex=
2025-10-09 17:20:42.222 ** ERROR ** [V12.2.2] [868] REMOTE_ADDR = 192.168.180.129
2025-10-09 17:20:42.222 ** ERROR ** [V12.2.2] [868] SCRIPT_FILENAME = /var/www/vhosts/open366.uxp-corp.com/httpdocs/tool/saveAttachment.php
2025-10-09 17:20:42.222 ** ERROR ** [V12.2.2] [868] CONNECTED USER = #868 - pierre.neel
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] Last connection = 2025-10-09 11:38:52
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] Last access = 2025-10-09 17:20:19
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] Disconnection =
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] === Trace Stack for last error ===
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] => /var/www/vhosts/open366.uxp-corp.com/httpdocs/tool/projeqtor.php at line 1734 calling debugPrintTraceStack()
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] => /var/www/vhosts/open366.uxp-corp.com/httpdocs/model/Security.php at line 302 calling traceHack()
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] => /var/www/vhosts/open366.uxp-corp.com/httpdocs/tool/saveAttachment.php at line 312 calling Security:checkEvilFile()
2025-10-09 17:20:42.224 ** ERROR ** [V12.2.2] [868] ===
Hello,
Yes, files with the .svg extension are not supported. I am going to create a ticket.
Please note that you are using version 12.2.2; the latest stable version is 12.3.1. (The forum cannot respond to older versions.)
Have a nice day,
You can upload svg file, but not svg file with included script : it is a security breach