File Upload Error - Undefined 500

dsmcdonough

KevinTheJedi This is what I get:

string(0) ""
string(26) "application/vnd.ms-outlook"

KevinTheJedi

dsmcdonough

Oh then you just need this:

https://github.com/osTicket/osTicket/pull/6495

Cheers.

dsmcdonough

KevinTheJedi You are correct, that fixed it! Thanks Kev.

ItsMePasse

KevinTheJedi
We have this issue too wit zip-files. We added the line and check the network tab. When i upload a zip files this appears in the network tab:

string(28) "application/x-zip-compressed"
string(15) "application/zip"

When i add the file from your pull request, the file is added to the ticket, but no email was sent to the customer...

KevinTheJedi

ItsMePasse

Applying the changes shouldn’t affect email sending unless you messed something up.

Cheers.

HugoBatel

I'm having almost the same problem after the 1.17.3 version upgrade.

On our configuration we dont have any excepcion about MIME types and no exclusion list, but we now cant upload files with .png extension. All the other file extension we can upload without any problem. only .png returns "undefined 500" error on upload. With version 1.17.2 it was working just fine.
I've tried the fix posted here but the problem remains the same.

KevinTheJedi

HugoBatel

Then that means the MIME type your browser is sending does not match what PHP sees as the actual MIME type. You can run the debug statements mentioned above to confirm. If so there is nothing you can do except disable the check but you will open yourself up to security vulnerabilities. Do so at your own risk. We are looking into what else we can do as it appears the magic database compiled with PHP doesn't have all file mime types which is ass.

Cheers.

HugoBatel

Hi Kevin,

First of all, thanks for your reply. I'm using the latest version of Microsoft Edge, If i go back to my backup version on 1.17.2 i dont have that "problem", php and mysql on the server are all the same versions. On my osTicket instalation this only happens on this new version. Should we wait for "fix"?

Thanks once again.

KevinTheJedi

HugoBatel

Correct, in v1.17.3 we added further checks on file uploads for security reasons. I will quote my previous reply below:

If so there is nothing you can do except disable the check but you will open yourself up to security vulnerabilities. Do so at your own risk. We are looking into what else we can do as it appears the magic database compiled with PHP doesn't have all file mime types which is ass.

Cheers.

HugoBatel

KevinTheJedi
Understood Kevin. Thanks for your support and work!

hhardy

KevinTheJedi What lines do we remove for the checks?

Is it the two functions "isValidFileType"?

KevinTheJedi

hhardy https://github.com/osTicket/osTicket/blob/develop/include/class.forms.php#L3975-L3977