Is it true file upload functionality will be removed from 1.4?

"Martin Gignac" <[email protected]> Fri, 8 Apr 2005 08:40:23 -0400
Newsgroups gmane.comp.web.wiki.moin.devel
Message-ID <[email protected]>
Hello,

While browsing the 'HelpOnConfiguration/FileAttachments' Wiki page on my
MoinMoin installation (I was reading the page for clues on how to set up a
Twisted web server instance to directly serve my file attachments), I noticed a
disclaimer that stated that "Note that we plan to remove that option in 1.4.
Because of that and the security problems noted below, we do not recommend that
option.". Is this actually true? Do you *really* plan to remove file attachment
support in version 1.4?

Although I can certainly understand the rationale behind not enabling file
upload in a *public* wiki server, I find that this option is absolutely
wonderful for a personal or Intranet wiki! I use MoinMoin at work and I think
it's very convenient to be able to upload documents such as PDFs, Visio network
diagrams, etc. so that they can quickly and easily be shared and referenced
amongst work colleagues. I would hate to see this useful option be pulled out of
the Wiki.

As far as I know this behavior is *not* activated in the default wikiconfig.py
file. Is that not good security enough? You could always remove the option from
the wikiconfig.py file and simply mention it on the HelpOnConfiguration page.

Anyway, hopefully you'll reconsider this stance as I think it would be sad to
lose this great feature, seeing as how it can serve such a useful purpose on
private sites.

Regards,
-Martin

--

"Les relations sont sûrement le miroir dans lequel on se découvre soi-même."	

                                           -- Jiddu Krishnamurti



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click