Upload Scanner
The Upload Scanner tab configures scanning of files uploaded through Joomla, blocking forbidden file types before they are saved to disk.
Options
| Option | Description |
|---|---|
| Upload Scanner | Enables file upload scanning. When active, every file upload attempt is intercepted and checked against the extension and MIME type blocklists. |
| Check Multiple Extensions | When enabled, files with multiple extensions (e.g. shell.php.jpg) are flagged and blocked regardless of whether the final extension is permitted. |
| Delete Files | When enabled, blocked files are deleted from any temporary location immediately. When disabled, the upload is blocked but the temporary file is not deleted. |
| Action on Blocked Upload | What to do after blocking an upload: Do Nothing (log only) or Add IP to Dynamic Blacklist (automatically block the uploader). |
| MIME Types Blacklist | A textarea of blocked MIME types, one per line. Uploads with a MIME type matching any entry are blocked. A full list of MIME types is available at iana.org. |
| Extensions Blacklist | A textarea of blocked file extensions, one per line (without the dot, e.g. php). Uploads with a matching extension are blocked. |
Even when Check Multiple Extensions is disabled, files whose final extension appears in the Extensions Blacklist are still blocked. Enable the multiple-extensions check to also catch disguised files like malware.php.jpg.
