Thread: Required ASAP - Agreement first, then upload

Required ASAP - Agreement first, then upload

As it works now, ClassiPress uploads from a users computer without permission.
After the image is uploaded, the user is asked to "Agree" or "Proceed".

At that point, ClassiPress has already "taken" from the user without permission.
This is a serious flaw that needs immediate correction.

May I remind AppThemes that ClassiPress is sold as a commercial application and as such carries all the potential legal liabilities of any business.

You may try adding a "term of reference" in the steps-functions.php before the continue button..

But how do you stop this:
http://wpclassipress.com/demo/wp-con...loads/2010/11/
From the classipress website - freely posted.

You can stop that by adding these lines in the .htaccess right on the top of all the rest

# Prevents directory listing
Options -Indexes

Also, I wonder how could someone upload an .exe file ??¿?

They could not. The image upload functions specifies the mime type of the images that are allowed to be uploaded.

To answer my own question; The "New Ad Message" in ClassiPress Settings can be used to obtain "Agreement" before the user fills out any information.

Thanks for the tips.

Anyway, I would still have to refer this to the developing team since the images are still uploaded once the continue button is clicked and if the user opt not to proceed to the final step/submission then the image will stay in your server.