Asgaroth/xupload — pull request #10 by acorncom (2012-10-29 22:56:39+00:00)
Title: Security fixes

These fixes attempt to prevent malicious users from deleting any file writeable by the webserver or files uploaded by another user that the malicious user shouldn't be able to delete.

I made it backwards compatible to keep from breaking current installations, but I'd suggest we add info to the docs on the Yii extension page about the secureFileNames flag for the action and recommend its use.