Disallow Flash File and Mime Type Uploads in Joomla - 🛠 Maintenance Monday Live Stream #045

Written by: Tim Davis Created: 25 June 2018

Category: Maintenance Monday

Hot!Hits: 2416Reading time: 01:34

Security Maintenance Monday

Since #Joomla 3.8.8, uploading flash files (swf files) and allowing the "flash" (application/x-shockwave-flash) mime type for uploading have been removed from the default settings of new Joomla installs. Allowing these 2 things is a security concern if there is not first a proper review of their contents and programming. How to remove flash file extensions and mime type from the allowed methods of uploading is what today's #maintenancemonday is all about.

 
00:00:00 – Stream Start & Updates
00:02:01 – Extensions & Tools
00:02:26 – Flash Security Overview
00:03:24 – Manual Disable Flash Uploads
00:06:45 – Remove Flash MIME Types
00:08:09 – MyJoomla Automated Tools
00:09:34 – Flash Security Risks
00:10:24 – Giveaway & Resources
00:11:20 – Live Chat & Dev Talk
00:12:55 – Stream Privacy Risks
00:14:24 – Multi-Site Management
00:16:42 – Joomla Access Security
00:18:21 – Streaming & Community Growth
00:21:09 – Real-Life Discussion
00:23:16 – Future Security Topics
00:23:57 – Wrap-Up

Summary

1. Stream Start & Updates –
   Opening announcements and overview of the episode’s security focus.

2. Extensions & Security Tools Overview –
   Discussion of Joomla tools and resources used for website protection.

3. Flash Upload Security Risks –
   Explanation of why Flash uploads create serious security vulnerabilities.

4. Manual Flash Upload Protection –
   Demonstration of disabling Flash uploads and removing risky MIME types.

5. Automated Security Tools –
   Using MyJoomla and similar tools to simplify website security management.

6. Giveaway & Community Resources –
   Sharing security tools, giveaways, and helpful learning resources.

7. Live Chat & Developer Discussion –
   Community interaction and real-world developer insights.

8. Streaming & Privacy Considerations –
   Discussion of livestream risks and protecting sensitive information.

9. Multi-Site & Access Security –
   Managing security across multiple Joomla sites and strengthening access control.

10. Future Security Topics & Wrap-Up –
    Preview of upcoming security discussions and final closing remarks.

Interesting blog? Like it on Facebook, Post it or share this article on other bookmarking websites.