Forum

Welcome to ProjeQtOr new Forum. We migrated old forum to the new website.
You will find all your posts here, with your usual account.
Just one point : you’ll have to reinitialize your password. Use “Lost password” feature.

Issue "Attachment"
 
Notifications
Clear all

Issue "Attachment"

3 Posts
3 Users
0 Reactions
969 Views
(@cso_arnaud)
Posts: 108
Active Member
Topic starter
 
[#9964]

Hi everyone,According to the online help documentation, it should be possible to upload any type of file in the "Attachment" section. However, I’ve noticed that SVG files seem to cause an issue.Thanks in advance for your help!Best regards,

 2025-10-09 17:20:42.221 ** ERROR ** [V12.2.2] [868] HACK ================================================================
2025-10-09 17:20:42.221 ** ERROR ** [V12.2.2] [868] Try to hack detected
2025-10-09 17:20:42.221 ** ERROR ** [V12.2.2] [868] Source Code = try to upload svg file with included script (../files/attach//attachment_2500/courbes_convoyeur.svg)
2025-10-09 17:20:42.222 ** ERROR ** [V12.2.2] [868] QUERY_STRING = csrfToken=31a21406ffe20677840f11dcee35222c83c4ef860cdca4a20495e082c71f8f663cb3e8&directAccessIndex=
2025-10-09 17:20:42.222 ** ERROR ** [V12.2.2] [868] REMOTE_ADDR = 192.168.180.129
2025-10-09 17:20:42.222 ** ERROR ** [V12.2.2] [868] SCRIPT_FILENAME = /var/www/vhosts/open366.uxp-corp.com/httpdocs/tool/saveAttachment.php
2025-10-09 17:20:42.222 ** ERROR ** [V12.2.2] [868] CONNECTED USER = #868 - pierre.neel
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] Last connection = 2025-10-09 11:38:52
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] Last access = 2025-10-09 17:20:19
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] Disconnection =
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] === Trace Stack for last error ===
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] => /var/www/vhosts/open366.uxp-corp.com/httpdocs/tool/projeqtor.php at line 1734 calling debugPrintTraceStack()
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] => /var/www/vhosts/open366.uxp-corp.com/httpdocs/model/Security.php at line 302 calling traceHack()
2025-10-09 17:20:42.223 ** ERROR ** [V12.2.2] [868] => /var/www/vhosts/open366.uxp-corp.com/httpdocs/tool/saveAttachment.php at line 312 calling Security:checkEvilFile()
2025-10-09 17:20:42.224 ** ERROR ** [V12.2.2] [868] ===


 
Posted : 09 Oct 2025 19H56
Maxca
(@maxime)
Posts: 274
Active Member Admin
 

Hello,
Yes, files with the .svg extension are not supported. I am going to  create a ticket.
Please note that you are using version 12.2.2; the latest stable version is 12.3.1. (The forum cannot respond to older versions.)
Have a nice day, 


 
Posted : 10 Oct 2025 11H20
babynus
(@babynus)
Posts: 14966
Main Contributor Admin
 

You can upload svg file, but not svg file with included script : it is a security breach


 
Posted : 10 Oct 2025 19H41
Share:

Scroll to Top