CiviCRM Community Forums (archive)

I was wondering what sort of security checks there are associated with files that are uploaded.

We have a request to add a custom field allowing a file to be attached to a contact when registering for an event. I have done some quick tests and it looks like there is no restriction on the types of files you can upload (I attached a .php file with no errors).

Should I be concerned about any potential security issues? Or am I just being overly cautious?

Cheers,

Conor