Restricting file types and modsecurity

Ask all your questions regarding OC 9.0 Please read the Support Forum Rules
Forum rules
The forums were migrated over to https://central.owncloud.org which is based on the forum software Discourse. The forums here is put into read-only mode starting from today.

More background information about this move and the reasoning behind it is available in this blogpost:

https://daniel.molkentin.net/2016/07/20 ... d-central/
itguy2016
Newbie
Posts: 1
Joined: Mon Jul 18, 2016 6:14 pm
ownCloud version: 9.0.2
Webserver: Apache
Database: MySQL
OS: Linux

Restricting file types and modsecurity

Postby itguy2016 » Mon Jul 18, 2016 6:24 pm

Hi,

I've been doing some testing with ownCloud as a replacement for our old ftp server. So far so good, I have got it up and running and using ssl.
What I now want to do is restrict the types of files that can be uploaded (by extension) - which after some reading seems possible using modsecurity.

I have this working to a point - uploading a banned file extension logs an access denied error but doesn't actually stop the upload. It does then stop the file being deleted and logs the same error.

Does anyone here have any experience of getting this to work with ownCloud, or alternatively if there's another way to do this that would be of interest too.

many thanks for any ideas...


Server configuration
Operating system: Ubuntu Serer 15.10
Web server:Apache
Database:MySQL
PHP version:5
ownCloud version:9
Fresh install

RealRancor
ownCloud master
Posts: 17381
Joined: Sat May 26, 2012 3:00 pm
ownCloud version: 9.0.2
Webserver: nginx
Database: MySQL
OS: Linux
PHP version: 7.0.x

Re: Restricting file types and modsecurity

Postby RealRancor » Mon Jul 18, 2016 8:32 pm

Hi,

there is no such functionality included in ownCloud to stop such an upload. All clients i know will try to upload the files again and again.
*gone*

tflidd
Forum Moderator
Posts: 7159
Joined: Sat Dec 07, 2013 7:27 pm
ownCloud version: 8.2.3
Webserver: Apache
Database: MySQL
OS: Linux

Re: Restricting file types and modsecurity

Postby tflidd » Tue Jul 19, 2016 12:36 am

Are files passed via POST or GET? There are perhaps some specific filter rules...


  • Similar Topics
    Replies
    Views
    Last post

Return to “ownCloud Server 9.0”

Who is online

Users browsing this forum: No registered users and 1 guest