Reputation: 5010
I'm trying to implement django-avatar in my Django app on a production server.
The problem is that the form for upload images accepts every type of files! This means a user can upload also a file.php
. So, I thought django-avatar handle this. How can I fix? I want the form accepts only images.
Upvotes: 1
Views: 682
Reputation: 2832
The most current version of django-avatar contains the fix to only allow image uploads. What version are you using? The pypi version (currently 1.0) is old and does not contain the updates.
Download the newest version from https://github.com/ericflo/django-avatar
Upvotes: 2