Fred Collins
Fred Collins

Reputation: 5010

Problem with django-avatar

I'm trying to implement django-avatar in my Django app on a production server. The problem is that the form for upload images accepts every type of files! This means a user can upload also a file.php. So, I thought django-avatar handle this. How can I fix? I want the form accepts only images.

Upvotes: 1

Views: 682

Answers (1)

Alex Jillard
Alex Jillard

Reputation: 2832

The most current version of django-avatar contains the fix to only allow image uploads. What version are you using? The pypi version (currently 1.0) is old and does not contain the updates.

Download the newest version from https://github.com/ericflo/django-avatar

Upvotes: 2

Related Questions