File Upload Settings

activate before v8 relied on iis web config settings to control the security settings for uploading images and files this was just based on the maximum size of the file activate v8 uses a much more sophisticated and secure mechanism for ensuring the uploaded files are safe these settings are stored in //resources/configuration/uploads maximum file size the maximum file size is specified in the 'maxfilesize' parameter this is the maximum number of bytes that the file can be before the upload is rejected this is separate from the maxfilesize on the fileupload and imageupload controls these maxfilesize on these controls must be equal to or smaller than the overall maxfilesize parameter set at this level validfiletypes the fileupload and imageupload have a list of extensions that are valid for each control however, these only check that the extension matches and start the upload the server also has a list of validfiletypes set at //resources/configuration/uploads as validfiletypes the system one should not be changed but additional parameters can be added to add additional file types the v8 security system does not just rely on the file name extension but checks the contents of the file to ensure that the file name extension matches the contents for example, this definition checks that a gif file contains the starting signature in the contents that indicates a gif file \<type ext=" gif"> \<signature>47 49 46 38\</signature> \</type>