Closed (fixed)
Project:
ImageField
Version:
6.x-3.10
Component:
Code
Priority:
Normal
Category:
Support request
Assigned:
Unassigned
Reporter:
Created:
18 Dec 2011 at 00:53 UTC
Updated:
1 Jan 2012 at 20:20 UTC
When an image is uploaded, even if the node is not saved in any way, the image stays uploaded in the Drupal installation.
This can cause serious issues, that I prefer not to describe.
EDIT : I want anonymous users to be able to post/upload, but normally an honest anonymous needs to submit passed the security test. But, at the moment with this module, any abusive engine can submit stuff even though it fails to submit the node.
Did I forget to configure something or is this just a major weakness in this module ?
I qualified this as a bug as this is not an intended behaviour.
Comments
Comment #0.0
michael_lessard_micles.biz commentedAdded a precision indicated by EDIT.
Comment #1
quicksketchYes that's right, the image needs to be uploaded in order for the "Preview" to work correctly and to prevent the file name from unexpectedly changing on the user. Imagine if the user needed to embed the image in the post, they need the path not to change.
When files are uploaded, they are marked as "temporary" in the "files" database table (status = 0). Files that are not marked permanent (status = 1) are deleted on cron jobs after 6 hours.
Comment #2
michael_lessard_micles.biz commentedAh, if non-perm. images are deleted by the module, that is good to know ! :P
I presume they are marked as temp. in the module table, as the images are not placed in the temp folder.
Comment #3
quicksketchRight. That's what I just said. Though the "files" table is used by all modules that manage files, not just ImageField and FileField.
Comment #4.0
(not verified) commented( a spelling mistake )