Uploading files fails

[Zegnåt]

I suggest you remove any suggestion for using this workaround regardless of the context out of this forum, since many many people find this via google and think "hey my upload is working" but opening a very critical security flaw for anyone who is aware of this and knows how to abuse it.

But, you can’t upload with 1.71 or later any more. The most discussed workaround here is to take away the AJAX option all together, which will still keep it safe. So what exactly should we take away?

And think of an uploadscript who uploads everything you send it! The script doesn't even bother which extension it is!
You could have at least excluded *.php or *.sh files from being uploaded :/

I don’t agree. I’ve actually uploaded a couple of PHP files through the upload sextion already, just so I didn’t have to get on a FTP when I was away from my own computer. Are there many CMS systems that don’t allow uploading PHP files that you know of?