Deprecation: #90147 - Unified File Name Validator¶
See Issue #90147
The logic for validating if a new (uploaded) or renamed file’s name is allowed
is now available in an encapsulated PHP class
The functionality is moved so all logic is encapsulated in one single place:
- PHP constant
FILE_DENY_PATTERN_DEFAULTis migrated into a class constant.
LocalConfiguration.phpsetting is only used when it differs from the default.
GeneralUtilitymethod has been marked as deprecated and calls
This optimization helps to only utilize and use PHPs memory if needed, and avoids to define run-time constants or variables. Logic is only initialized when needed - e.g. when uploading files or using TYPO3’s importer via EXT:impexp.
In addition, the PHP constant
PHP_EXTENSIONS_DEFAULT which is not
in use anymore, has been marked as deprecated, too.
Using the method
GeneralUtility::verifyFilenameAgainstDenyPattern() directly will trigger a PHP
Using the constants will continue to work but will stop doing so TYPO3 v11.0, when they will be removed.
The system-wide setting to override the default file deny pattern,
$GLOBALS['TYPO3_CONF_VARS']['BE']['fileDenyPattern'] is only set when
different from the systems default. If it is the same, the option is not set anymore by TYPO3 Core.
TYPO3 installations with PHP code calling the mentioned method directly or using one of the global constants directly.
Instead of calling
Instead of using the constant
For the PHP constant
PHP_EXTENSIONS_DEFAULT there is no replacement, as it has no benefit for TYPO3 Core anymore.
The extension scanner will detect the method calls or the usage of the constants.