When I specify that I want only jpg files to be uploaded, then go to post a file, such as regedit.exe, it says in the window that such a filename is not acceptable to upload, however it still uploads it to the directory.. So it wouldn't take much figuring out to upload a file and then find the url to get to it...
Donate to UBBDev today to help aid in Operational, Server and Script Maintenance, and Development costs.
Please also see our parent organization VNC Web Services if you're in the need of a new UBB.threads Install or Upgrade, Site/Server Migrations, or Security and Coding Services.