[Gelöst] Forum bug: files in /wp-content/uploads/tmp/ wont be delete

[Author]

Artikel

[ricoF]

Hi,

images wich uploaded in this forum are stored in toolset.com/wp-content/uploads/tmp/ but won't be delete after a while. So all this images are still present...
For example:
- https://toolset.com/wp-content/uploads/tmp/test.png
- https://toolset.com/wp-content/uploads/tmp/editor.png
- https://toolset.com/wp-content/uploads/tmp/screenshot.png
- https://toolset.com/wp-content/uploads/tmp/screenshot.jpg
- https://toolset.com/wp-content/uploads/tmp/screen.png
- https://toolset.com/wp-content/uploads/tmp/post.png
- https://toolset.com/wp-content/uploads/tmp/page.png

Maybe this is a privacy and security lack.

Best wishes

[Shane]

Hi Rico,

Thank you for getting in touch.

Can you let me know exactly how you were able to arrive at these image links ?

Were they accessible through google ?

Please let me know.
Thanks,
Shane

[ricoF]

No, not accessible through google.

I uploaded an image for another topic in this forum but my browser shown another (before uploaded) image with the same name.
So, i tried some other urls and reach this links.
Would i build a crawler wich goes trough any letter-sign-compination maybe i would get all images after a while ...

[Shane]

Hi Rico,

Are you able to do a short recording on how you did this so that I could perhaps forward it to our systems team ?

Thanks,
Shane

[ricoF]

Mh, on my second test the images are correctly. I don#t know why my browser has shown this other images from /tmp as an preview.
The upload seems to work correctly now but the images are still there like https://toolset.com/wp-content/uploads/tmp/screenshot.png - maybe this tmp files should be deleted after a while?

[Shane]

Hi Rico,

I suspect this will be the case.

Can we consider this issue as resolved ?

Thanks,
Shane

[ricoF]

Hi Shane,
this was more a recommendation than an issue 🙂
I would suggest to delete the files in your tmp folder after a while to prevent privacy and security interruptions.
And yes, set it as resolved.
Best

[Shane]

Hi Rico,

Thank you for the suggestion.

Before I make the recommendation to the relevant team. Can you explain is a much detail how I can replicate the issue so they too can understand the issue as well.

Thanks,
Shane

[ricoF]

Hi Shane,

Again: I uploaded an image for another topic in this forum and my browser shown another image with the same name as preview.
I've checked the preview URL and came to the tmp folder. I've checked another simple file names (see my list) and recognized that your tmp folder will not be emptied after a while.
On my second try some days later the preview are correct.
The previously uploaded files still exists. Maybe this is a security or privacy risk. If not, mark this thread as resolved.

Best

[Shane]

Closing here.