The File Types Settings is where you define the different file types (based on their extensions) that can be uploaded as attachments to posts, comments & private messages or even furthermore renamed or edited in b2evolution’s File Manager.
Each file type can also be associated to an icon, a MIME type and a View Type. The View Type determines how the file can be displayed in b2evolution. For example, images, videos and audio files can be displayed inline, in the content of a post, whereas PDF files could only be added as attachments to be downloaded or displayed in another window.
.php files or even javascript code such as .html files should be restricted to admins. They are restricted (red lock icon) by default.)Additional security considerations
In b2evolution’s default configuration:
- Files with a green lock can be uploaded by any user, including visitors with no authentication. This is used to allow attaching images to comments.
- Files with an orange lock can be uploaded by registered users only.
- Files with a red lock can be uploaded by administrators only. This is used for adding third party skins and/or plugins to the installation. By default, only the admin account can do this.
You can finely configure which of your User Groups should have permission to upload/edit files of each security level (green/orange/red) by editing the File Permissions of each User Group.
See also: