unclecheese/Uploadify — pull request #36 by RVXD (2012-12-20 20:05:40+00:00)
Title: Restrict upload to allowed file types only (2.4.x)

If Uploadify module is used with SS 2.4.x it will replace upload functionality within the CMS.
This makes the system vulnerable. Once logged into the CMS a user can upload a .htaccess file or .php file and run it on the server. This fix will prevent that from happening. After trying to upload an unallowed file system will alert with message 'File type not allowed!'. Can be translated using i18n.