Allowed file extensions
When non-empty, ONLY these extensions may upload/download. Empty = no whitelist.
Allowed file extensions
Whitelist. When non-empty, only these extensions can be uploaded and publicly downloaded.
Where to find it
Admin → Settings → Files → Uploads → Allowed file extensions
Setting key: ext_allowed
How it works
ext_allowed |
ext_not_allowed |
Result |
|---|---|---|
| Empty | Empty | No extension filter |
| Set | Empty | Must be on the allow list |
| Empty | Set | Must not be blocked; extensionless names are rejected when a blocklist exists |
| Both set | Both set | Must be allowed and not blocked — block wins on overlap |
Empty allow list does not mean “block everything” — it means no whitelist.
Common problems
Nobody can upload anything
You set a whitelist and forgot common types (zip, mp4, …). Add them or clear the list.