At risk to you? No. At risk to your users? Maybe. Depends on what you allow uploaded. PHP for example can not execute as CB Gallery won't allow it. I suppose someone could pack a virus into a zip file and would be a risk to users who download it, but not your site. Only way to stop that is to virus scan uploads, but even that's not entirely reliable. Vast majority of your upload protection is going to come from server configuration.
There's always some risk when allowing user content. Even a text field. You never know what someone is going to write for example (could be racist, hateful, etc..). All come with risk. How much risk you want to take is entirely up to your needs. If you don't need file uploads then I wouldn't allow it.
Kyle (Krileon) Community Builder Team Member Before posting on forums:
Read FAQ thoroughly
+
Read our Documentation
+
Search the forums CB links:
Documentation
-
Localization
-
CB Quickstart
-
CB Paid Subscriptions
-
Add-Ons
-
Forge
-- If you are a Professional, Developer, or CB Paid Subscriptions subscriber and have a support issue please always post in your respective support forums for best results!
-- If I've missed your support post with a delay of 3 days or greater and are a Professional, Developer, or CBSubs subscriber please
send me a private message
with your thread and will reply when possible!
-- Please note I am available Monday - Friday from 8:00 AM CST to 4:00 PM CST. I am away on weekends (Saturday and Sunday) and if I've missed your post on or before a weekend after business hours please wait for the next following business day (Monday) and will get to your issue as soon as possible, thank you.
-- My role here is to provide guidance and assistance. I cannot provide custom code for each custom requirement. Please do not inquire me about custom development.
krileon
