Qwissit TYPO3

TYPO3 security

Uploads, files and extensions

12 of 60 questions in the app

File uploads

  1. Which risk arises from an insecure file upload? Easy
  2. What is a web shell? Easy

fileDenyPattern

  1. What is the fileDenyPattern used for in TYPO3? Easy
  2. Which files does the default fileDenyPattern block, among others? Easy

File extensions

  1. Why is a file named shell.php.jpg a risk? Easy

Extensions

  1. Where should you obtain TYPO3 extensions? Easy
  2. Which extensions do not belong on a production site? Easy
  3. Why are extensions with bundled executable programs delicate? Easy

fileDenyPattern

  1. Which extensions does TYPO3's default fileDenyPattern block? Medium
  2. Why should you not weaken the fileDenyPattern? Medium

File uploads

  1. A form allows uploading "applications" and stores them in fileadmin/. An attacker uploads application.php. Which measures prevent the damage? Hard

fileDenyPattern

  1. Why is the fileDenyPattern alone not enough against upload attacks via custom plugins? Hard

Certifications & exams

Which exam comes next?

You can already practise for 19 exams, and 21 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications